IBM WebSphere Application Server prior to 7.0.0.15 Multiple Security Vulnerabilities

Bugtraq ID:	46736
Class:	Design Error
CVE:	CVE-2011-1310 CVE-2011-1311 CVE-2011-1312 CVE-2011-1313 CVE-2011-1314 CVE-2011-1315 CVE-2011-1316 CVE-2011-1317 CVE-2011-1318 CVE-2011-1319 CVE-2011-1320 CVE-2011-1321 CVE-2011-1322 CVE-2011-1307 CVE-2011-1308 CVE-2011-1362 CVE-2011-1309
Remote:	Yes
Local:	No
Published:	Mar 03 2011 12:00AM
Updated:	Apr 13 2015 09:05PM
Credit:	The vendor reported these issues.
Vulnerable:	IBM Websphere Application Server 7.0 .12 IBM Websphere Application Server 7.0 .11 IBM Websphere Application Server 6.1.2 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .33 IBM Websphere Application Server 6.1 .32 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .25 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 7.0.0.14 IBM Websphere Application Server 7.0.0.13 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 6.1.0.34 IBM Websphere Application Server 6.1.0.33 IBM Websphere Application Server 6.1.0.31 IBM Websphere Application Server 6.1.0.29 IBM Websphere Application Server 6.1.0.27
Not Vulnerable:	IBM Websphere Application Server 6.1 41 IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 7.0.0.15 IBM Websphere Application Server 6.1.0.35

IBM WebSphere Application Server prior to 7.0.0.15 Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user into following a malicious URI.

IBM WebSphere Application Server prior to 7.0.0.15 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.