Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Websphere Virtual Enterprise
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-4575 1 Ibm 2 Websphere Application Server, Websphere Virtual Enterprise 2020-08-27 4.3 MEDIUM 6.1 MEDIUM
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
CVE-2019-4505 1 Ibm 2 Websphere Application Server, Websphere Virtual Enterprise 2020-08-24 5.0 MEDIUM 5.3 MEDIUM
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.
CVE-2019-4030 1 Ibm 2 Websphere Application Server, Websphere Virtual Enterprise 2019-10-09 3.5 LOW 5.4 MEDIUM
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.