Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory
    exhaustion and servlet outage) via unknown vectors related to a large number of calls in a batch.
    (CVE-2007-0185)

Websphere has been updated to version 2.1.0.1 to fix several security vulnerabilities in the included subprojects, such as Apache Geronimo and Tomcat. (CVE-2007-0184 / CVE-2007-0185 / CVE-2007-2377 / CVE-2007-2449 / CVE-2007-2450 / CVE-2007-3382 / CVE-2007-3385 / CVE-2007-3386 / CVE-2007-5333 / CVE-2007-5342 / CVE-2007-5461 / CVE-2007-5613 / CVE-2007-5615 / CVE-2007-6286 / CVE-2008-0002 / CVE-2008-1232 / CVE-2008-1947 / CVE-2008-2370 / CVE-2008-2938)

ID	Name	Product	Family	Type	Severity
415706	SCA: security update for org.directwebremoting:dwr (GHSA-hg5p-233h-c7fh)	Tenable Cloud Security	SCA Checks	Local	high
415706	SCA: security update for org.directwebremoting:dwr (GHSA-hg5p-233h-c7fh)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
41596	SuSE 10 Security Update : Websphere Community Edition (ZYPP Patch Number 5850)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2007-0185

high

Tenable Plugins

high

high

high