IBM WebSphere Application Server 7.2 Lombardi Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:7.2:*:lombardi:*:*:*:*:*
part: a version: 7.2 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | lombardi |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-4758 |
vulnerable | 2026-06-08 05:05:45.736241 |
Details available
IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.x allow remote authenticated users to bypass intended access restrictions and send requests to internal services via a callService URL.
Published: 2014-09-04T10:00:00.000Z
Updated: 2024-08-06T11:27:36.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3087 |
vulnerable | 2026-06-08 05:05:31.058280 |
Details available
callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Published: 2014-08-17T23:00:00.000Z
Updated: 2024-08-06T10:35:56.985Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0957 |
vulnerable | 2026-06-08 05:05:15.232276 |
Details available
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager 7.5 through 8.5.5, and WebSphere Lombardi Edition 7.2, allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a service failure.
Published: 2014-07-18T01:00:00.000Z
Updated: 2024-08-06T09:34:40.405Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0707 |
vulnerable | 2026-06-08 05:00:44.542588 |
Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section.
Published: 2012-02-23T11:00:00.000Z
Updated: 2024-08-06T18:30:54.016Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.