IBM has acknowledged some vulnerabilities in IBM WebSphere Application Server, which can be exploited by malicious users to cause a DoS (Denial of Service) and by malicious people to conduct cross-site scripting and cross-site request forgery attacks, disclose potentially sensitive information, and cause a DoS (Denial of Service).

1) Certain unspecified input is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain unspecified actions by tricking a logged in administrative user into visiting a malicious web site.

3) An unspecified error in the Integrated Solution Console can be exploited to inject links. No further information is currently available.

4) An unspecified error in the administrative console can be exploited to cause high CPU usage.

For more information see vulnerability #4 in:
SA40350

5) Certain unspecified input passed to the administrative console is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

6) The mod_proxy_http Apache module does not properly handle certain timeout conditions, which can lead to responses being returned to the wrong users.

For more information see vulnerability #1 in:
SA40206

7) An error in the Java API for XML Web Service (JAX-WS) can be exploited to corrupt data resulting in incorrectly encoded data sent to clients and causing a DoS via specially crafted JAX-WS requests.

Solution
Apply Fix Pack 13 (7.0.0.13).

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
IBM (PM17046, PM18909, PM11777, PM11807, PM13777, PM14251, PM16366):
http://www.ibm.com/support/docview.wss?uid=swg1PM23868
http://www.ibm.com/support/docview.wss?uid=swg1PM23870
http://www.ibm.com/support/docview.wss?uid=swg1PM23872
http://www.ibm.com/support/docview.wss?uid=swg1PM23874
http://www.ibm.com/support/docview.wss?uid=swg21443736
http://www.ibm.com/support/docview.wss?uid=swg27014463#70013
http://www.ibm.com/support/docview.wss?uid=swg1PM16366

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area