IBM WebSphere Application Server Multiple Vulnerabilities

Last Update Date: 23 Aug 2012 10:09 Release Date: 23 Aug 2012 4445 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities have been identified in IBM WebSphere Application Server, which can be exploited by remote attackers to cause denial of service, cross site scripting and disclosure of sensitive information.

Impact

Cross-Site Scripting
Denial of Service
Information Disclosure

System / Technologies affected

Version 8.5
Version 8
Version 7
Version 6.1

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
http://www-01.ibm.com/support/docview.wss?uid=swg21606096

Vulnerability Identifier

CVE-2012-3293
CVE-2012-2191
CVE-2012-2190
CVE-2012-2170
CVE-2012-2159

Source

AusCERT