Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*

part: a version: 6.0.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-4816 vulnerable 2026-06-08 05:05:46.106229 Details available
Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4770 vulnerable 2026-06-08 05:05:45.863401 Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated administrators to inject arbitrary web script or HTML via a crafted URL.
Published: 2014-09-23T22:00:00.000Z
Updated: 2024-08-06T11:27:36.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2162 vulnerable 2026-06-08 05:00:53.098820 Details available
The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication after expiration of the plugin-key.kdb password, which allows remote attackers to obtain sensitive information by sniffing the network, or spoof arbitrary servers via a man-in-the-middle attack.
Published: 2012-05-01T19:00:00.000Z
Updated: 2024-08-06T19:26:08.460Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0193 vulnerable 2026-06-08 05:00:39.819470 Details available
IBM WebSphere Application Server (WAS) 6.0 through 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Published: 2012-01-20T02:00:00.000Z
Updated: 2024-08-06T18:16:19.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1683 vulnerable 2026-06-08 04:58:01.381568 Details available
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
Published: 2011-04-13T14:00:00.000Z
Updated: 2024-09-17T00:16:19.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1318 vulnerable 2026-06-08 04:57:57.695272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1316 vulnerable 2026-06-08 04:57:57.690021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1315 vulnerable 2026-06-08 04:57:57.685901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1314 vulnerable 2026-06-08 04:57:57.680726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1311 vulnerable 2026-06-08 04:57:57.674617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1309 vulnerable 2026-06-08 04:57:57.669370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1308 vulnerable 2026-06-08 04:57:57.664913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1307 vulnerable 2026-06-08 04:57:57.628981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3271 vulnerable 2026-06-08 04:55:13.887226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2327 vulnerable 2026-06-08 04:55:06.801359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1650 vulnerable 2026-06-08 04:54:09.688972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0779 vulnerable 2026-06-08 04:52:04.448911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0777 vulnerable 2026-06-08 04:52:04.425242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0776 vulnerable 2026-06-08 04:52:04.423227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0775 vulnerable 2026-06-08 04:52:04.421246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0774 vulnerable 2026-06-08 04:52:04.397144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0770 vulnerable 2026-06-08 04:52:04.385173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0769 vulnerable 2026-06-08 04:52:04.382538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2747 vulnerable 2026-06-08 04:51:30.320009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0436 vulnerable 2026-06-08 04:51:09.496307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0434 vulnerable 2026-06-08 04:51:09.481281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0433 vulnerable 2026-06-08 04:51:09.473766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0217 vulnerable 2026-06-08 04:51:08.379203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4284 vulnerable 2026-06-08 04:50:38.419569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5483 vulnerable 2026-06-08 04:50:06.189200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4137 vulnerable 2026-06-08 04:49:11.031053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4136 vulnerable 2026-06-08 04:49:11.029268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.