Vulnerabilities > IBM > Websphere Application Server > 6.0.2.11

DATE CVE VULNERABILITY TITLE RISK
2006-10-17 CVE-2006-5324 Remote Security vulnerability in Websphere Application Server
The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.
network
low complexity
ibm
7.5
2006-10-17 CVE-2006-5323 Remote Security vulnerability in Websphere Application Server
Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360.
network
low complexity
ibm
critical
10.0
2006-08-18 CVE-2006-4223 Information Exposure vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.
network
low complexity
ibm CWE-200
5.0
2006-08-18 CVE-2006-4222 Remote Security vulnerability in Websphere Application Server
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123.
network
low complexity
ibm
5.0
2006-08-14 CVE-2006-4136 Permissions, Privileges, and Access Controls vulnerability in IBM Websphere Application Server
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
network
low complexity
ibm CWE-264
7.5