Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Z\/os
Total 43 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-1683 1 Ibm 2 Websphere Application Server, Z\/os 2011-04-21 6.8 MEDIUM N/A
IBM WebSphere Application Server (WAS) 6.0.x through 6.0.2.43, 6.1.x before 6.1.0.37, and 7.0.x before 7.0.0.17 on z/OS, when a Local OS user registry or Federated Repository with RACF adapter is used, allows remote attackers to obtain unspecified application access via unknown vectors.
CVE-2010-2327 1 Ibm 2 Websphere Application Server, Z\/os 2010-06-21 4.3 MEDIUM N/A
mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
CVE-2009-0856 1 Ibm 2 Websphere Application Server, Z\/os 2009-06-05 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in sample applications in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, and 6.1 before 6.1.0.23 on z/OS, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.