Test ID:	1.3.6.1.4.1.25623.1.0.802412
Category:	Web Servers
Title:	IBM WebSphere Application Server Multiple Vulnerabilities (Jan 2012)
Summary:	IBM WebSphere Application Server is prone to multiple; vulnerabilities.
Description:	Summary: IBM WebSphere Application Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - An unspecified error exists in a WS-Security policy enabled Java API for XML Web Services (JAX-WS) application - A certain unspecified input passed to the web messaging component is not properly sanitised before being returned to the user - A SibRaRecoverableSiXaResource class in the Default Messaging Component, does not properly handle a Service Integration Bus (SIB) dump operation involving the First Failure Data Capture (FFDC) introspection code Vulnerability Impact: Successful exploitation will let attackers to conduct cross-site scripting (XSS) attacks or to obtain sensitive information and cause a denial of service (DoS). Affected Software/OS: IBM WebSphere Application Server version 6.1.x prior to 6.1.0.41. Solution: Update to version 6.1.0.41 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-5066 AIX APAR: PM36685 http://www-01.ibm.com/support/docview.wss?uid=swg1PM36685 Common Vulnerability Exposure (CVE) ID: CVE-2011-5065 AIX APAR: PM37840 http://www-01.ibm.com/support/docview.wss?uid=swg1PM37840 AIX APAR: PM49872 http://www-01.ibm.com/support/docview.wss?uid=swg1PM49872 BugTraq ID: 51559 http://www.securityfocus.com/bid/51559 http://secunia.com/advisories/46469 XForce ISS Database: was-wm-xss(72336) https://exchange.xforce.ibmcloud.com/vulnerabilities/72336 Common Vulnerability Exposure (CVE) ID: CVE-2011-1377 AIX APAR: PM43792 http://www-01.ibm.com/support/docview.wss?uid=swg1PM43792 AIX APAR: PM50205 http://www-01.ibm.com/support/docview.wss?uid=swg1PM50205 BugTraq ID: 50310 http://www.securityfocus.com/bid/50310 XForce ISS Database: was-wssecurity-unspecified(72299) https://exchange.xforce.ibmcloud.com/vulnerabilities/72299
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.