Computer vulnerabilities of IBM WebSphere ESB

Apache Struts: privilege escalation
An attacker can bypass restrictions of Apache Struts, in order to escalate his privileges...
2015348, cpuoct2017, CVE-2015-0899, DSA-3536-1, ibm10716909, ibm10719287, ibm10719297, ibm10719301, ibm10719303, ibm10719307, swg22017524, VIGILANCE-VUL-19274

Apache Struts 1: code execution via ClassLoader
An attacker can use the "class" parameter, to manipulate the ClassLoader, in order to execute code...
1672316, 1673982, 1674339, 1675822, 2016214, 6198380, c04399728, c05324755, CERTFR-2014-AVI-382, cpuapr2017, cpujan2018, cpujan2019, cpuoct2017, cpuoct2018, CVE-2014-0114, DSA-2940-1, ESA-2014-080, FEDORA-2014-9380, HPSBGN03669, HPSBMU03090, ibm10719287, ibm10719297, ibm10719301, ibm10719303, ibm10719307, MDVSA-2014:095, RHSA-2014:0474-01, RHSA-2014:0497-01, RHSA-2014:0500-01, RHSA-2014:0511-01, RHSA-2018:2669-01, SOL15282, SUSE-SU-2014:0902-1, swg22017525, VIGILANCE-VUL-14799, VMSA-2014-0008, VMSA-2014-0008.1, VMSA-2014-0008.2, VMSA-2014-0012

Apache HttpClient 3: incomplete certificate validation
An attacker can use any valid certificate on a malicious server, and then invite an Apache HttpClient 3 to connect there, in order to spy communications even if encryption is used...
2016216, BID-58073, CVE-2012-5783, FEDORA-2013-1189, FEDORA-2013-1203, FEDORA-2013-1289, HTTPCLIENT-1265, ibm10719287, ibm10719297, ibm10719301, ibm10719303, ibm10719307, openSUSE-SU-2013:0354-1, openSUSE-SU-2013:0622-1, openSUSE-SU-2013:0623-1, openSUSE-SU-2013:0638-1, RHSA-2013:0270-01, RHSA-2013:0679-01, RHSA-2013:0680-01, RHSA-2013:0681-01, RHSA-2013:0682-01, RHSA-2013:0763-01, RHSA-2013:1006-01, RHSA-2013:1147-01, RHSA-2013:1853-01, RHSA-2014:0224-01, RHSA-2017:0868-01, swg22017526, USN-2769-1, VIGILANCE-VUL-12182

Our database contains other pages. You can request a free trial to read them.

Display information about IBM WebSphere ESB:

https://www.ibm.com/support/knowledgecenter/en/SS7J6S/mapfiles/product_welcome.html