Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Zos
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-2323 1 Ibm 2 Websphere Application Server, Zos 2023-12-10 5.0 MEDIUM N/A
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
CVE-2010-2324 1 Ibm 2 Websphere Application Server, Zos 2023-12-10 7.5 HIGH N/A
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.
CVE-2010-2325 1 Ibm 2 Websphere Application Server, Zos 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."
CVE-2010-1182 1 Ibm 2 Websphere Application Server, Zos 2023-12-10 7.5 HIGH N/A
Multiple unspecified vulnerabilities in the administrative console in IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.9 on z/OS have unknown impact and attack vectors.
CVE-2009-0391 1 Ibm 2 Websphere Application Server, Zos 2023-12-10 7.8 HIGH N/A
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors.