Vulnerabilities > IBM > Websphere Application Server > 19.0.0.6

DATE CVE VULNERABILITY TITLE RISK
2019-10-03 CVE-2019-4441 Information Exposure Through an Error Message vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.
network
low complexity
ibm CWE-209
5.3
5.3
2019-09-30 CVE-2019-4305 Reliance on Cookies without Validation and Integrity Checking vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie.
network
low complexity
ibm CWE-565
5.3
5.3
2019-09-30 CVE-2019-4304 Session Fixation vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation.
network
low complexity
ibm CWE-384
6.3
6.3