IBM FileNet Application Engine

ソフト名：IBM FileNet Application Engine 4.0
回避策：あり
脆弱性：セキュリティ制限の回避, XSS, 機密情報の奪取, 認証資格情報の奪取, 不正アクセス
ソース：http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7241
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-7242
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7261
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4998
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4999
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5000
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5001
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5002
CVE：CVE-2006-7241, CVE-2006-7242, CVE-2008-7261, CVE-2009-4998, CVE-2009-4999, CVE-2009-5000, CVE-2009-5001, CVE-2009-500
危険性：Medium Risk

IBM FileNet Application Engine

ソフト名：IBM FileNet Application Engine 3.5/4.0
回避策：あり
脆弱性：セッションの乗っ取り, XSS, スプーフィング攻撃, アカウントの乗っ取り, 認証資格情報の奪取
ソース：http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
http://download2.boulder.ibm.com/sar/CMA/IMA/00y3y/0/readme-4027-P8AE-FP007.htm
http://www.securityfocus.com/bid/43271
http://www.securityfocus.com/bid/43272
http://secunia.com/advisories/41458
http://secunia.com/advisories/41460
http://www.vupen.com/english/advisories/2010/2419
危険性：Medium Risk