Secunia Logo  


Secunia PSI WorldMap
 
Vulnerability Report: IBM Websphere Application Server 4.x
This vulnerability report for IBM Websphere Application Server 4.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in IBM Websphere Application Server 4.x then you are more than welcome to contact us.


Table of Contents

1. Product Summary Only

2. Secunia Advisory Statistics (All time)
2.1. Statistics for 2009
2.2. Statistics for 2008
2.3. Statistics for 2007
2.4. Statistics for 2006
2.5. Statistics for 2005
2.6. Statistics for 2004
2.7. Statistics for 2003

3. List of Secunia Advisories (All time)
3.1. List for 2009
3.2. List for 2008
3.3. List for 2007
3.4. List for 2006
3.5. List for 2005
3.6. List for 2004
3.7. List for 2003

4. Send Feedback
 
Vendor, Links, and Unpatched Vulnerabilities

Vendor IBM

Product Link View Here (Link to external site)

Affected By 5 Secunia advisories
3 Vulnerabilities

Monitor Product Receive alerts for this product

Unpatched 20% (1 of 5 Secunia advisories)

Most Critical Unpatched
The most severe unpatched Secunia advisory affecting IBM Websphere Application Server 4.x, with all vendor patches applied, is rated Not critical .




5 Secunia Advisories in 2003-2009
Secunia has issued a total of 5 Secunia advisories in 2003-2009 for IBM Websphere Application Server 4.x. Currently, 20% (1 out of 5) are marked as unpatched with the most severe being rated Not critical

More information about the specific Secunia advisories affecting IBM Websphere Application Server 4.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.



IBM HTTP Server PCRE and Byte-Range Filter Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 2 in 2005. 13,094 views.
Release Date:
2005-10-07
Secunia Advisory ID:
SA17036
Solution Status:
Vendor Patch
Criticality:
Impact:
Privilege escalation
DoS
Where:
From remote
Short Description:
IBM has acknowledged two vulnerabilities in IBM HTTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service), or by malicious, local users to gain escalated privileges via a specially crafted ".htaccess" file. [Read More]


IBM WebSphere Application Server JSP Source Code Disclosure
Vendor Patch. Secunia Advisory 2 of 2 in 2005. 13,430 views.
Release Date:
2005-02-14
Secunia Advisory ID:
SA14274
Solution Status:
Vendor Patch
Criticality:
Impact:
Exposure of sensitive information
Where:
From remote
Short Description:
A vulnerability has been reported in WebSphere Application Server, which can be exploited by malicious people to gain knowledge of potentially sensitive information. [Read More]


IBM HTTP Server Input Header Folding Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 1 of 1 in 2004. 8,607 views.
Release Date:
2004-07-29
Secunia Advisory ID:
SA12181
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
IBM has acknowledged a vulnerability in IBM HTTP Server, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]


Websphere weak password protection
Unpatched. Secunia Advisory 1 of 1 in 2003. 4,992 views.
Release Date:
2003-02-05
Secunia Advisory ID:
SA7998
Solution Status:
Unpatched
Criticality:
Impact:
Exposure of sensitive information
Where:
Local system
Short Description:
An information disclosure vulnerability exists in Websphere, which can be exploited by a malicious person to gain knowledge of sensitive information. [Read More]


IBM Websphere large header DoS
Vendor Patch. Secunia Advisory 1 of 1 in 2002. 3,755 views.
Release Date:
2002-09-19
Secunia Advisory ID:
SA7132
Solution Status:
Vendor Patch
Criticality:
Impact:
DoS
Where:
From remote
Short Description:
It is possible to crash Websphere by sending a large HTTP request. [Read More]