6.1.0.18

DATE	CVE	VULNERABILITY TITLE	RISK
2009-02-10	CVE-2008-4284	Link Following vulnerability in IBM Websphere Application Server Open redirect vulnerability in the ibm_security_logout servlet in IBM WebSphere Application Server (WAS) 5.1.1.19 and earlier 5.x versions, 6.0.x before 6.0.2.33, and 6.1.x before 6.1.0.23 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage feature. network ibm CWE-59	5.8
2008-09-16	CVE-2008-4111	Unspecified vulnerability in IBM WebSphere Application Server 'FileServing' Feature Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors. network ibm critical	9.3