Vulnerabilities > IBM > Websphere Application Server > 6.0.1.11

DATE CVE VULNERABILITY TITLE RISK
2006-08-18 CVE-2006-4222 Remote Security vulnerability in Websphere Application Server
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123.
network
low complexity
ibm
5.0
2006-08-14 CVE-2006-4136 Permissions, Privileges, and Access Controls vulnerability in IBM Websphere Application Server
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
network
low complexity
ibm CWE-264
7.5
2005-11-04 CVE-2005-3498 Information Exposure vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 5.0.x before 5.02.15, 5.1.x before 5.1.1.8, and 6.x before fixpack V6.0.2.5, when session trace is enabled, records a full URL including the queryString in the trace logs when an application encodes a URL, which could allow attackers to obtain sensitive information.
network
ibm CWE-200
4.3