Test ID:	1.3.6.1.4.1.25623.1.0.806825
Category:	Web Servers
Title:	IBM WebSphere Application Server Liberty Multiple Vulnerabilities (swg21614265)
Summary:	IBM WebSphere Application Server Liberty is prone to multiple; vulnerabilities.
Description:	Summary: IBM WebSphere Application Server Liberty is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to - when JAX-RS is used, does not properly validate requests - improper validation of the URI Vulnerability Impact: Successful exploitation may allow a remote attacker to conduct a cross-site scripting attack, and eleveated privileges on the server caused by incorrect request validation. Affected Software/OS: IBM WebSphere Application Server Liberty Profile version 8.5.x prior to 8.5.0.1. Solution: Update to version 8.5.0.1 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4850 AIX APAR: PM67082 http://www-01.ibm.com/support/docview.wss?uid=swg1PM67082 BugTraq ID: 56460 http://www.securityfocus.com/bid/56460 XForce ISS Database: was-libertyprofile-security-bypass(79539) https://exchange.xforce.ibmcloud.com/vulnerabilities/79539 Common Vulnerability Exposure (CVE) ID: CVE-2012-4851 AIX APAR: PM68643 http://www-01.ibm.com/support/docview.wss?uid=swg1PM68643 BugTraq ID: 56423 http://www.securityfocus.com/bid/56423 XForce ISS Database: was-libertyprofile-xss(79541) https://exchange.xforce.ibmcloud.com/vulnerabilities/79541
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.