Ibm Websphere Service Registry And Repository vulnerabilities

19 known vulnerabilities affecting ibm/websphere_service_registry_and_repository.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

MEDIUM13LOW6

Vulnerabilities

Page 1 of 1

CVE-2019-4537MEDIUMCVSS 5.3v8.52020-02-26

CVE-2019-4537 [MEDIUM] CVE-2019-4537: IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version inf IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593.

cvelistv5nvd

CVE-2014-6160LOWCVSS 2.1v8.52014-12-29

CVE-2014-6160 [LOW] CWE-264 CVE-2014-6160: IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

nvd

CVE-2014-6181MEDIUMCVSS 4.0v7.0.0v7.0.0.1+3 more2014-12-24

CVE-2014-6181 [MEDIUM] CWE-264 CVE-2014-6181: IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-co IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

nvd

CVE-2014-6179MEDIUMCVSS 4.3v7.5.0.0v7.5.0.1+4 more2014-12-24

CVE-2014-6179 [MEDIUM] CWE-79 CVE-2014-6179: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2014-6186MEDIUMCVSS 4.0v6.3.0v6.3.0.1+13 more2014-12-24

CVE-2014-6186 [MEDIUM] CWE-264 CVE-2014-6186: IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7. IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrictions via the datagraph.

nvd

CVE-2014-6177MEDIUMCVSS 4.0v7.0.0v7.0.0.1+6 more2014-12-24

CVE-2014-6177 [MEDIUM] CWE-264 CVE-2014-6177: IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 d IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

nvd

CVE-2014-6155MEDIUMCVSS 4.0v7.5.0.0v7.5.0.1+7 more2014-12-24

CVE-2014-6155 [MEDIUM] CWE-22 CVE-2014-6155: Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Regi Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authenticated users to read arbitrary files via unspecified vectors.

nvd

CVE-2014-6187MEDIUMCVSS 6.0v6.3.0v6.3.0.1+13 more2014-12-24

CVE-2014-6187 [MEDIUM] CWE-352 CVE-2014-6187: Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Rep Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

nvd

CVE-2014-6153MEDIUMCVSS 4.3v6.3.0v6.3.0.1+19 more2014-12-24

CVE-2014-6153 [MEDIUM] CWE-310 CVE-2014-6153: The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x thro The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within a

nvd

CVE-2014-6178LOWCVSS 3.5v7.5.0.0v7.5.0.1+5 more2014-12-24

CVE-2014-6178 [LOW] CWE-79 CVE-2014-6178: Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Reposi Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2014-6132LOWCVSS 3.5v6.3.0v6.3.0.1+19 more2014-12-24

CVE-2014-6132 [LOW] CWE-79 CVE-2014-6132: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2014-6180LOWCVSS 3.5v7.0.0v7.0.0.1+4 more2014-12-24

CVE-2014-6180 [LOW] CWE-79 CVE-2014-6180: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the HTTP User-Agent header.

nvd

CVE-2014-6188LOWCVSS 3.5v6.3.0v6.3.0.1+14 more2014-12-24

CVE-2014-6188 [LOW] CWE-79 CVE-2014-6188: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2014-3010MEDIUMCVSS 4.3v6.2.0v6.3.0+19 more2014-05-30

CVE-2014-3010 [MEDIUM] CWE-79 CVE-2014-3010: Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Reposit Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

nvd

CVE-2013-6721LOWCVSS 3.5v7.5.0.2v7.5.0.3+3 more2013-12-17

CVE-2013-6721 [LOW] CWE-79 CVE-2013-6721: Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets.

nvd

CVE-2011-1357MEDIUMCVSS 4.3v6.3.0v6.3.0.1+9 more2011-08-11

CVE-2011-1357 [MEDIUM] CWE-79 CVE-2011-1357: Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service R Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.

nvd

CVE-2010-2644MEDIUMCVSS 5.0v7.0.02010-12-22

CVE-2010-2644 [MEDIUM] CWE-264 CVE-2010-2644: IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement ac IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interface.

nvd

CVE-2010-2985MEDIUMCVSS 4.3v6.3.02010-08-10

CVE-2010-2985 [MEDIUM] CWE-79 CVE-2010-2985: Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the searchTerm parameter to ServiceRegistry/HelpSearch.do or (2) the queryItems[0].value parameter to ServiceRegistry/QueryWizardProcessStep1.do.

nvd

CVE-2009-2750MEDIUMCVSS 5.5v6.3.0v6.3.0.12010-02-04

CVE-2009-2750 [MEDIUM] CWE-16 CVE-2009-2750: IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended con IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access via a property query.

nvd