Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: IBM WebSphere Application Server 5.x
This vulnerability report for IBM WebSphere Application Server 5.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in IBM WebSphere Application Server 5.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor IBM

Product Link View Here (Link to external site)

Affected By 21 Secunia advisories
27 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 0% (0 of 21 Secunia advisories)

Most Critical Unpatched
There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..




21 Secunia Advisories in 2003-2009
Secunia has issued a total of 21 Secunia advisories in 2003-2009 for IBM WebSphere Application Server 5.x. Currently, 0% (0 out of 21) are marked as unpatched.

More information about the specific Secunia advisories affecting IBM WebSphere Application Server 5.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



IBM WebSphere Application Server WAR File Information Disclosure
Vendor Patch. Secunia Advisory 1 of 3 in 2009. 2,846 views.
Release Date:
2009-03-13
Secunia Advisory ID:
SA34283
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
A vulnerability has been reported in WebSphere Application Server, which can be exploited by malicious people to disclose potentially sensitive information. [Read More]


IBM WebSphere Application Server for z/OS Unspecified Vulnerability
Vendor Patch. Secunia Advisory 2 of 3 in 2009. 1,034 views.
Release Date:
2009-02-25
Secunia Advisory ID:
SA34038
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
Local system
Short Description:
IBM has acknowledged a vulnerability with an unknown impact in IBM Websphere Application Server for z/OS. [Read More]


WebSphere Application Server Unspecified Information Disclosure
Vendor Patch. Secunia Advisory 3 of 3 in 2009. 3,210 views.
Release Date:
2009-01-30
Secunia Advisory ID:
SA33729
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of system information
Exposure of sensitive information
Where:
From local network
Short Description:
A vulnerability has been reported in WebSphere Application Server, which can potentially be exploited by malicious users to disclose sensitive information. [Read More]


IBM WebSphere Application Server Unspecified Vulnerability
Vendor Patch. Secunia Advisory 1 of 3 in 2008. 5,289 views.
Release Date:
2008-07-18
Secunia Advisory ID:
SA31149
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
From remote
Short Description:
A vulnerability with an unknown impact has been reported in IBM WebSphere Application Server. [Read More]


IBM WebSphere Application Server Java Plugin Security Bypass
Vendor Patch. Secunia Advisory 2 of 3 in 2008. 7,269 views.
Release Date:
2008-05-01
Secunia Advisory ID:
SA29976
Solution Status:
Vendor Patch
Criticality:
Impact:
Security Bypass
Where:
From remote
Short Description:
A vulnerability has been reported in IBM WebSphere Application Server, which can be exploited by malicious people to bypass certain security restrictions. [Read More]


IBM WebSphere Application Server serveServletsByClassnameEnabled Information Disclosure
Vendor Patch. Secunia Advisory 3 of 3 in 2008. 4,831 views.
Release Date:
2008-04-08
Secunia Advisory ID:
SA29687
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of system information
Where:
From remote
Short Description:
A weakness has been reported in IBM WebSphere Application Server, which can be exploited by malicious people to disclose system information. [Read More]


IBM WebSphere Application Server WebContainer "Expect" Header Cross-Site Scripting
Vendor Patch. Secunia Advisory 1 of 4 in 2007. 5,790 views.
Release Date:
2007-11-15
Secunia Advisory ID:
SA27674
Solution Status:
Vendor Patch
Criticality:
Impact:
Cross Site Scripting
Where:
From remote
Short Description:
A vulnerability has been reported in IBM WebSphere Application Server, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]


IBM WebSphere Application Server Unspecified Vulnerability
Vendor Patch. Secunia Advisory 2 of 4 in 2007. 7,826 views.
Release Date:
2007-10-15
Secunia Advisory ID:
SA27249
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
From remote
Short Description:
A vulnerability with an unknown impact has been reported in IBM WebSphere Application Server. [Read More]


IBM WebSphere Application Server Unspecified Vulnerability
Vendor Patch. Secunia Advisory 3 of 4 in 2007. 7,717 views.
Release Date:
2007-04-27
Secunia Advisory ID:
SA25045
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
From remote
Short Description:
A vulnerability with unknown impact has been reported in IBM WebSphere Application Server. [Read More]


IBM WebSphere Application Server JSP Source Code Disclosure
Vendor Patch. Secunia Advisory 4 of 4 in 2007. 10,997 views.
Release Date:
2007-03-16
Secunia Advisory ID:
SA24478
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
A vulnerability has been reported in IBM WebSphere Application Server, which can be exploited by malicious people to disclose potentially sensitive information. [Read More]


IBM WebSphere Application Server Unspecified Vulnerability
Vendor Patch. Secunia Advisory 1 of 3 in 2006. 10,244 views.
Release Date:
2006-12-15
Secunia Advisory ID:
SA23386
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
From remote
Short Description:
A vulnerability with unknown impact has been reported in IBM WebSphere Application Server. [Read More]


IBM WebSphere Application Server Two Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 3 in 2006. 8,134 views.
Release Date:
2006-06-27
Secunia Advisory ID:
SA20793
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Exposure of sensitive information
Where:
From remote
Short Description:
Two vulnerabilities have been reported in IBM WebSphere Application Server, where one has an unknown impact and the other can be exploited by malicious people to gain knowledge of sensitive information. [Read More]


IBM Websphere Application Server Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 3 of 3 in 2006. 14,703 views.
Release Date:
2006-05-09
Secunia Advisory ID:
SA20032
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Security Bypass
Exposure of sensitive information
Where:
From remote
Short Description:
Some vulnerabilities have been reported in IBM WebSphere Application Server, where some have unknown impacts and others may disclose sensitive information or bypass certain security restrictions. [Read More]


IBM WebSphere Application Server for z/OS Double-Free Vulnerability
Vendor Patch. Secunia Advisory 1 of 4 in 2005. 8,604 views.
Release Date:
2005-11-22
Secunia Advisory ID:
SA17658
Solution Status:
Vendor Patch
Criticality:
Impact:
Unknown
Where:
From remote
Short Description:
A vulnerability has been reported in WebSphere Application Server for z/OS, which has an unknown impact. [Read More]


IBM HTTP Server PCRE and Byte-Range Filter Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 4 in 2005. 13,157 views.
Release Date:
2005-10-07
Secunia Advisory ID:
SA17036
Solution Status:
Vendor Patch
Criticality:
Impact:
Privilege escalation
DoS
Where:
From remote
Short Description:
IBM has acknowledged two vulnerabilities in IBM HTTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service), or by malicious, local users to gain escalated privileges via a specially crafted ".htaccess" file. [Read More]


WebSphere Application Server Administrative Console Buffer Overflow
Vendor Patch. Secunia Advisory 3 of 4 in 2005. 12,174 views.
Release Date:
2005-06-03
Secunia Advisory ID:
SA15598
Solution Status:
Vendor Patch
Criticality:
Impact:
System access
Where:
From local network
Short Description:
Esteban Martínez Fayó has reported a vulnerability in IBM WebSphere Application Server, which can be exploited by malicious people to compromise a vulnerable system. [Read More]


IBM WebSphere Application Server JSP Source Code Disclosure
Vendor Patch. Secunia Advisory 4 of 4 in 2005. 13,480 views.
Release Date:
2005-02-14
Secunia Advisory ID:
SA14274
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
A vulnerability has been reported in WebSphere Application Server, which can be exploited by malicious people to gain knowledge of potentially sensitive information. [Read More]


IBM HTTP Server Input Header Folding Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 1 of 2 in 2004. 8,625 views.
Release Date:
2004-07-29
Secunia Advisory ID:
SA12181
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
IBM has acknowledged a vulnerability in IBM HTTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]


IBM WebSphere Application Server Caching Proxy Denial of Service
Vendor Patch. Secunia Advisory 2 of 2 in 2004. 13,668 views.
Release Date:
2004-07-06
Secunia Advisory ID:
SA12013
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
Leandro Meiners has reported a vulnerability in IBM WebSphere Application Server, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]


Multiple Vendor SOAP Server DTD Parameter Denial of Service
Vendor Patch. Secunia Advisory 1 of 2 in 2003. 10,243 views.
Release Date:
2003-12-12
Secunia Advisory ID:
SA10417
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
A vulnerability has been identified in various products, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]


Multiple Vendor SOAP Server XML Parser Denial of Service
Vendor Patch. Secunia Advisory 2 of 2 in 2003. 12,079 views.
Release Date:
2003-12-10
Secunia Advisory ID:
SA10398
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
A vulnerability has been identified in various products, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]