Vulnerabilities > IBM > Websphere Application Server > 6.1.0.14

DATE CVE VULNERABILITY TITLE RISK
2008-12-10 CVE-2008-5413 Information Exposure vulnerability in IBM Websphere Application Server
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.
network
low complexity
ibm CWE-200
5.0
2008-12-10 CVE-2008-5412 Multiple Unspecified vulnerability in IBM WebSphere Application Server
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs.
network
low complexity
microsoft ibm
critical
10.0
2008-12-10 CVE-2008-5411 Cryptographic Issues vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
network
low complexity
ibm CWE-310
5.0
2008-09-16 CVE-2008-4111 Unspecified vulnerability in IBM WebSphere Application Server 'FileServing' Feature
Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.
network
ibm
critical
9.3
2008-06-04 CVE-2008-2550 Remote Security vulnerability in Websphere Application Server
Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.
network
low complexity
ibm
5.0