IBM WebSphere Application Server 7.0 before Fix Pack 25 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

The version of IBM Tivoli Storage Manager installed on the remote host is 6.3.x prior to 6.3.4.0. It is, therefore, affected by a vulnerability that could allow a remote attacker to cause a denial of service via specially crafted values in the TLS Record Layer.

The version of IBM Tivoli Storage Manager installed on the remote host is 5.5 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

The version of IBM Tivoli Storage Manager installed on the remote host is 6.2.x prior to 6.2.6.0. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

IBM WebSphere Application Server 6.1 before Fix Pack 45 appears to be running on the remote host.  As such, it is potentially affected by the following vulnerabilities :

  - An error exists related to 'Application Snoop Servlet'     and missing access controls. This error can allow     sensitive information to be disclosed. Note that     exploiting this issue requires that the default     'Application Snoop Servlet' be installed and running.
    (CVE-2012-2170, PM56183)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296)

IBM WebSphere Application Server 8.5 before Fix Pack 1 appears to be running on the remote host and is, therefore, potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, PM66410)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)  
  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

  - An unspecified error in the 'ISC Console' can allow a     remote attacker to take over a valid user's session.
    (CVE-2012-3304, PM54356)

  - An unspecified directory traversal error exists that     can allow remote attackers to overwrite files outside     the application's deployment directory. (CVE-2012-3305,     PM62467)

  - When multi-domain support is enabled, the application     does not properly purge passwords from the     authentication cache. (CVE-2012-3306, PM66514)

  - An error exists related to 'Federated Repositories',     'IIOP' connections, 'CBIND' checking and 'Optimized     Local Adapters' that can allow a remote attacker to     bypass security restrictions. Note that this issue     affects the application when running on z/OS.
    (CVE-2012-3311, PM61388)

  - The fix contained in PM44303 contains an error that     can allow an authenticated attacker to bypass security     restrictions and gain administrative access to the     application. (CVE-2012-3325, PM71296) 

  - A request validation error exists related to the proxy     server component that can allow a remote attacker to     cause the proxy status to be reported as disabled thus     denying applications access to the proxy.
    (CVE-2012-3330, PM71319)

  - A request validation error exists related to the     'Liberty Profile' and 'JAX-RS' that can allow a remote     attacker to elevate privileges. (CVE-2012-4850, PM67082)

  - A user-supplied input validation error exists related     to the 'Liberty Profile' that can allow cross-site     scripting attacks to be carried out. (CVE-2012-4851,     PM68643)

  - A user-supplied input validation error exists that can     allow cross-site request forgery (CSRF) attacks to be     carried out. (CVE-2012-4853, PM62920)

The version of IBM WebSphere MQ server is version 7.0 without Fix Pack 7.0.1.9, 7.1 without Fix Pack 7.1.0.2 or 7.5 without Fix Pack 7.5.0.1. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly validate data when the 'protection     mechanism' is executed against an SSL CBC timing attack.
    A remote attacker, using crafted values in the TLS Record     Layer, can exploit this to cause a denial of service.
    (CVE-2012-2191)

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly verify certificates, which can allow     a remote attacker to conduct a man-in-the-middle attack.
    (CVE-2012-2203)

The version of IBM WebSphere MQ server is version 7.1 without Fix Pack 7.1.0.2 or 7.5 without Fix Pack 7.5.0.1. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly validate data when the 'protection     mechanism' is executed against an SSL CBC timing attack.
    A remote attacker, using crafted values in the TLS Record     Layer, can exploit this to cause a denial of service.
    (CVE-2012-2191)

  - A flaw exists in Global Security Kit (GSkit) due to a     failure to properly verify certificates, which can allow     a remote attacker to conduct a man-in-the-middle attack.
    (CVE-2012-2203)

  - An application can potentially put a sequence of large     messages into the queue, causing a buffer to overflow in     the queue manager. This can lead to a denial of service.
    (CVE-2012-4863)

According to its version, the installation of IBM DB2 9.7 running on the remote host is prior to Fix Pack 9. It is, therefore, affected by one or more of the following vulnerabilities :

  - The included software, GSKit, contains several errors     related to SSL and TLS that can result in denial of     service, information disclosures, or unauthorized     insertion of an arbitrary root Certification Authority     certificate. (CVE-2012-2190, CVE-2012-2191,     CVE-2012-2203, CVE-2013-0169 / IC90395)

  - A stack-based buffer overflow exists related to     'db2aud' and 'db2flacc' that allows a local attacker     to elevate privileges to that of an instance owner. The     'db2aud' issue does not affect installs on the Windows     operating system. (CVE-2013-3475 / IC92495)

  - An unspecified error exists that allows an attacker to     gain SELECT, INSERT, UPDATE, or DELETE permissions to     database tables. Note that successful exploitation     requires the rights EXPLAIN, SQLADM, or DBADM.
    (CVE-2013-4033 / IC94523)

  - An error exists related to the XSLT parser that allows     a NULL pointer to be dereferenced. (CVE-2013-5466 /     IC97470)

  - An error exists related to queries containing OLAP     specifications that allows remote, authenticated     attackers to close database connections and deactivate     the database. (CVE-2013-6717 / IC95641)

The version of IBM Tivoli Storage Manager installed on the remote host is 6.1 running on Windows or AIX. It is, therefore, potentially affected by multiple flaws in its bundled SSL library:

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted 'ClientHello'     message. (CVE-2012-2190).

  - A flaw that could allow a remote attacker to cause a     denial of service via a specially crafted value in     the TLS Record Layer. (CVE-2012-2191).

  - A flaw that could allow a remote attacker to perform a     statistical timing attack known as 'Lucky Thirteen'.
    (CVE-2013-0169).

IBM WebSphere Application Server 8.0 before Fix Pack 4 appears to be running on the remote host and is potentially affected by the following vulnerabilities :

  - An input validation error exists related to the 'Eclipse     Help System' that can allow arbitrary redirect responses     to HTTP requests. (CVE-2012-2159, CVE-2012-2161,     PM62795)

  - An error exists related to 'Application Snoop Servlet'     and missing access controls. This error can allow     sensitive information to be disclosed. Note that     exploiting this issue requires that the default     'Application Snoop Servlet' be installed and running.
    (CVE-2012-2170, PM56183)

  - Several errors exist related to SSL/TLS that can allow     an attacker to carry out denial of service attacks     against the application. (CVE-2012-2190, CVE-2012-2191,     PM66218)

  - Unspecified cross-site scripting issues exist related to     the administrative console. (CVE-2012-3293, PM60839)

ID	Name	Product	Family	Published	Updated	Severity
62413	IBM WebSphere Application Server 7.0 < Fix Pack 25 Multiple Vulnerabilities	Nessus	Web Servers	10/3/2012	8/6/2018	medium
77119	IBM Tivoli Storage Manager Server 6.3.x < 6.3.4.0 DoS	Nessus	General	8/11/2014	4/11/2022	medium
77116	IBM Tivoli Storage Manager Server 5.5.x Multiple Vulnerabilities	Nessus	General	8/11/2014	12/5/2022	low
77118	IBM Tivoli Storage Manager Server 6.2.x < 6.2.6.0 Multiple Vulnerabilities	Nessus	General	8/11/2014	12/5/2022	low
62394	IBM WebSphere Application Server 6.1 < Fix Pack 45 Multiple Vulnerabilities	Nessus	Web Servers	10/2/2012	8/6/2018	medium
62975	IBM WebSphere Application Server 8.5 < Fix Pack 1 Multiple Vulnerabilities	Nessus	Web Servers	11/20/2012	12/4/2019	high
63098	IBM WebSphere MQ 7.0 / 7.1 / 7.5 Global Security Toolkit Vulnerabilities	Nessus	Windows	11/29/2012	8/6/2018	high
63099	IBM WebSphere MQ 7.1 / 7.5 Multiple Vulnerabilities	Nessus	Windows	11/29/2012	8/6/2018	high
71519	IBM DB2 9.7 < Fix Pack 9 Multiple Vulnerabilities	Nessus	Databases	12/18/2013	4/11/2022	critical
77117	IBM Tivoli Storage Manager Server 6.1.x Multiple Vulnerabilities	Nessus	General	8/11/2014	12/5/2022	low
61459	IBM WebSphere Application Server 8.0 < Fix Pack 4 Multiple Vulnerabilities	Nessus	Web Servers	8/9/2012	12/4/2019	medium

Detections

Analytics

Plugins Search

medium

medium

low

low

medium

high

high

high

critical

low

medium