Secunia

Some vulnerabilities have been reported in IBM WebSphere Application Server, where some have unknown impacts and others can potentially be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, or cause a DoS (Denial of Service)

1) An unspecified error within the Default Messaging Component can be exploited to cause certain threads to hang.

2) The Default Messaging Component performs an incorrect authorization on a remote interface to the SDO repository.

3) An unspecified vulnerability with an unknown impact exists within the PD tools component.

4) Some vulnerabilities are caused due to IBM WebSphere Application Server shipping a vulnerable version of Apache Struts as "Optional Library".

For more information:
SA19493

Solution
Apply appropriate APARs or Fix Packs. Please see the vendor's advisories for details.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg1PK28619
http://www-1.ibm.com/support/docview.wss?uid=swg21267948

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area