Vulnerabilities > IBM > Websphere Application Server > 6.1.0.43

DATE CVE VULNERABILITY TITLE RISK
2008-12-10 CVE-2008-5413 Information Exposure vulnerability in IBM Websphere Application Server
PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files.
network
low complexity
ibm CWE-200
5.0
2008-12-10 CVE-2008-5412 Multiple Unspecified vulnerability in IBM WebSphere Application Server
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs.
network
low complexity
microsoft ibm
critical
10.0
2008-12-10 CVE-2008-5411 Cryptographic Issues vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
network
low complexity
ibm CWE-310
5.0