| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | ≤ 6.0.2.15 |
CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free