This page was not yet optimized for use on mobile devices.

IBM WebSphere Application Server V5.0.2.8

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Certificate details

Status	archived
Valid from	02.12.2004
Valid until	06.09.2012
Scheme	🇺🇸 US
Manufacturer	IBM Corporation
Category	Databases
Security level	ALC_FLR.1, EAL2+

Certificate

certificate could not be downloaded, no link is available.

Certification report

Certification report PDF TXT

Extracted keywords

Vendor

Microsoft

Security level

EAL 2, EAL 1, EAL 4, EAL2, EAL 2 augmented

Security Assurance Requirements (SAR)

ALC_FLR.1, ATE_FUN, ATE_COV

Certificates

CCEVS-VR-04-0082

Frontpage

Certificate ID	CCEVS-VR-04-0082 Dated: December 2, 2004 Version: 1.3
Certified item	#### IBM WebSphere Application Server
Certification lab	US NIAP

Title	Validation Report
Author	Santosh Chokhani
Creation date	D:20041213113741-05'00'
Modification date	D:20041213114215-05'00'
Pages	13
Creator	Acrobat PDFMaker 5.0 for Word
Producer	Acrobat Distiller 5.0.5 (Windows)

Security target

Security target PDF TXT

Extracted keywords

Protocols

SSL

Vendor

Microsoft

Security level

EAL2, EAL2 augmented

Claims

O.ACCESS, O.IDENTIFY, O.MANAGE, O.ADMIN, O.APP, O.ATTR, O.PROTECT, O.RECOVER, T.ACCESS_RES, T.ACCESS_TOE, T.APP, T.NETWORK, A.APP, A.PROTECT, A.ADMIN

Security Assurance Requirements (SAR)

ACM_CAP.2, ADO_DEL.1, ADO_IGS.1, ADV_FSP.1, ADV_HLD.1, ADV_RCR.1, AGD_ADM.1, AGD_USR.1, ALC_FLR.1, ATE_COV.1, ATE_FUN.1, ATE_IND.2, AVA_SOF.1, AVA_VLA.1

Security Functional Requirements (SFR)

FDP_ACC, FDP_ACC.2.1, FDP_ACC.2.2, FDP_ACF, FDP_ACF.1.1, FDP_ACF.1.2, FDP_ACF.1.3, FDP_ACF.1.4, FDP_ACC.2, FDP_ACF.1, FDP_ACC.1, FIA_ATD, FIA_UID, FIA_UID.2.1, FIA_USB, FIA_USB.1.1, FIA_USB.1, FIA_UID.2, FIA_UID.1, FIA_ATD.1, FMT_MSA, FMT_MSA.1.1, FMT_SMF, FMT_SMF.1.1, FMT_SMR, FMT_SMR.1.1, FMT_SMR.1.2, FMT_MSA.3.1, FMT_MSA.3.2, FMT_MSA.1, FMT_MSA.3, FMT_SMF.1, FMT_SMR.1

Standards

CCIMB-99-031

Title	Websphere Application Server EAL2 Security Target
Author	Mark Bellis
Creation date	D:20041214074756-05'00'
Modification date	D:20041214074956-05'00'
Pages	40
Creator	Acrobat PDFMaker 5.0 for Word
Producer	Acrobat Distiller 5.0.5 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Certificate ID

CCEVS-VR-0082-2004

Extracted SARs

ADV_FSP.1, ADV_HLD.1, ADV_RCR.1, AGD_ADM.1, AGD_USR.1, ALC_FLR.1, ATE_COV.1, ATE_FUN.1, ATE_IND.2, AVA_SOF.1, AVA_VLA.1

CPE matches

CVE matches

ID	Links	Severity	CVSS Score	Published on
ID	Links	Severity	Base score	Published on
CVE-2005-0425	C N	MEDIUM	5.0	02.05.2005
CVE-2005-1112	C N	MEDIUM	5.0	02.05.2005
CVE-2005-1872	C N	HIGH	7.5	03.06.2005
CVE-2005-2091	C N	MEDIUM	4.3	05.07.2005
CVE-2005-3498	C N	MEDIUM	4.3	04.11.2005
CVE-2005-4834	C N	MEDIUM	5.0	31.12.2005
CVE-2006-1093	C N	MEDIUM	6.4	09.03.2006
CVE-2006-2430	C N	HIGH	10.0	17.05.2006
CVE-2006-2431	C N	MEDIUM	4.3	17.05.2006
CVE-2006-2432	C N	HIGH	7.5	17.05.2006
CVE-2006-2435	C N	MEDIUM	6.4	17.05.2006
CVE-2006-2436	C N	HIGH	7.5	17.05.2006
CVE-2006-3231	C N	MEDIUM	4.3	27.06.2006
CVE-2006-3232	C N	HIGH	10.0	27.06.2006
CVE-2006-4136	C N	HIGH	7.5	14.08.2006
CVE-2006-4222	C N	MEDIUM	5.0	18.08.2006
CVE-2006-4223	C N	MEDIUM	5.0	18.08.2006
CVE-2006-5323	C N	HIGH	10.0	17.10.2006
CVE-2006-5324	C N	HIGH	7.5	17.10.2006
CVE-2006-7166	C N	MEDIUM	5.0	20.03.2007
CVE-2007-1608	C N	HIGH	7.5	22.03.2007
CVE-2007-1944	C N	MEDIUM	5.0	11.04.2007
CVE-2007-3262	C N	HIGH	7.8	19.06.2007
CVE-2007-3263	C N	HIGH	10.0	19.06.2007
CVE-2007-3264	C N	HIGH	10.0	19.06.2007
CVE-2007-3265	C N	MEDIUM	4.3	19.06.2007
CVE-2007-3960	C N	HIGH	9.3	24.07.2007
CVE-2007-4833	C N	MEDIUM	5.0	12.09.2007
CVE-2007-5798	C N	MEDIUM	4.3	03.11.2007
CVE-2007-5799	C N	MEDIUM	4.3	03.11.2007
CVE-2007-6679	C N	HIGH	10.0	10.01.2008
CVE-2008-0389	C N	HIGH	10.0	23.01.2008
CVE-2008-0740	C N	LOW	2.1	13.02.2008
CVE-2008-0741	C N	HIGH	10.0	13.02.2008
CVE-2008-2221	C N	HIGH	10.0	14.05.2008
CVE-2008-2550	C N	MEDIUM	5.0	04.06.2008
CVE-2008-4283	C N	HIGH	10.0	10.02.2009
CVE-2008-4284	C N	MEDIUM	5.8	10.02.2009
CVE-2008-5411	C N	MEDIUM	5.0	10.12.2008
CVE-2008-5413	C N	MEDIUM	5.0	10.12.2008
CVE-2009-0504	C N	LOW	2.1	17.02.2009
CVE-2009-1898	C N	MEDIUM	5.0	03.06.2009
CVE-2009-1899	C N	HIGH	10.0	03.06.2009
CVE-2009-1900	C N	MEDIUM	5.0	03.06.2009
CVE-2009-1901	C N	HIGH	10.0	03.06.2009
CVE-2010-0768	C N	MEDIUM	4.3	01.04.2010
CVE-2010-0769	C N	LOW	1.9	01.04.2010
CVE-2010-0770	C N	MEDIUM	4.0	01.04.2010
CVE-2010-3271	C N	MEDIUM	6.8	18.07.2011
CVE-2011-1307	C N	LOW	2.1	08.03.2011
CVE-2011-1308	C N	MEDIUM	4.3	08.03.2011
CVE-2011-1309	C N	HIGH	7.5	08.03.2011
CVE-2011-1311	C N	MEDIUM	6.0	08.03.2011
CVE-2011-1314	C N	MEDIUM	5.0	08.03.2011
CVE-2011-1315	C N	MEDIUM	5.0	08.03.2011
CVE-2011-1316	C N	MEDIUM	5.0	08.03.2011
CVE-2011-1318	C N	MEDIUM	5.0	08.03.2011
CVE-2012-2162	C N	MEDIUM	6.8	01.05.2012
CVE-2013-0542	C N	MEDIUM	4.3	24.04.2013

Showing 5 out of 59.

Scheme data

Product	IBM WebSphere Application Server Version 5.0.2.8
Id	CCEVS-VR-VID4023
URL	https://www.niap-ccevs.org/products/4023
Api Url	https://www.niap-ccevs.org/api/project/product/pcl_products/4023/
Certification Date	02.12.2004
Expiration Date	—
Category	Web Server
Categories	Web Server
Vendor	IBM Corporation
Evaluation Facility	Leidos Common Criteria Testing Laboratory
Scheme	US

Cross-references

No references are available for this certificate.

Processing updates

15.09.2026

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'txt_hash': 'b4d981824d3b096728648ec48fad584ec07dfc5f54edc45ad795875aee09eb2a', 'json_hash': '4abc8861061ba7b4bce243c41e0b8a558f8e58868a9b818307f30624dd0c53fe'} data.

The st property was updated, with the {'txt_hash': '7148478556962d450531f2356a665e8cbb1f8e75813a62f321503c9b462bd254', 'json_hash': '50cb8a257489006b431cb8a0c4780b7398c688ef15a5e8d8d09f6cebc99f8300'} data.

The PDF extraction data was updated.

The report_frontpage property was updated, with the {'US': {'__update__': {'cert_id': 'CCEVS-VR-04-0082 Dated: December 2, 2004 Version: 1.3', 'cert_item': '#### IBM WebSphere Application Server'}}} data.

The st_keywords property was updated, with the {'cc_sfr': {'__update__': {'FDP': {'__insert__': {'FDP_ACC': 2}, '__update__': {'FDP_ACC.2': 5, 'FDP_ACF': 4, 'FDP_ACC.2.2': 2, 'FDP_ACF.1.2': 2}}, 'FIA': {'__update__': {'FIA_USB.1': 5}}, 'FMT': {'__update__': {'FMT_MSA.1': 7, 'FMT_MSA': 6, 'FMT_MSA.1.1': 2, 'FMT_SMR.1.1': 2}}}}} data.
20.04.2026

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was set to {'_type': 'Set', 'elements': ['CVE-2007-4833', 'CVE-2007-3264', 'CVE-2005-3498', 'CVE-2005-1112', 'CVE-2007-6679', 'CVE-2007-3262', 'CVE-2006-5323', 'CVE-2010-0769', 'CVE-2011-1308', 'CVE-2005-4834', 'CVE-2006-4223', 'CVE-2008-4283', 'CVE-2006-2430', 'CVE-2011-1316', 'CVE-2006-4136', 'CVE-2008-4284', 'CVE-2009-0504', 'CVE-2009-1900', 'CVE-2011-1315', 'CVE-2013-0542', 'CVE-2008-0389', 'CVE-2011-1318', 'CVE-2012-2162', 'CVE-2009-1898', 'CVE-2008-2550', 'CVE-2009-1901', 'CVE-2005-0425', 'CVE-2007-1608', 'CVE-2010-0768', 'CVE-2006-2431', 'CVE-2007-3263', 'CVE-2011-1311', 'CVE-2007-3265', 'CVE-2011-1309', 'CVE-2006-1093', 'CVE-2007-1944', 'CVE-2007-5799', 'CVE-2010-0770', 'CVE-2007-3960', 'CVE-2010-3271', 'CVE-2006-3232', 'CVE-2011-1307', 'CVE-2006-2436', 'CVE-2006-3231', 'CVE-2009-1899', 'CVE-2011-1314', 'CVE-2008-5413', 'CVE-2006-2432', 'CVE-2006-4222', 'CVE-2005-2091', 'CVE-2006-5324', 'CVE-2008-5411', 'CVE-2006-7166', 'CVE-2008-0741', 'CVE-2008-0740', 'CVE-2008-2221', 'CVE-2005-1872', 'CVE-2006-2435', 'CVE-2007-5798']}.
02.03.2026

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The _type property was set to sec_certs.sample.cc_eucc_common.InternalState.

The PDF extraction data was updated.

The _type property was set to sec_certs.sample.cc_eucc_common.PdfData.

The computed heuristics were updated.

The _type property was set to sec_certs.sample.cc_eucc_common.Heuristics.

The related_cves property was set to None.
15.12.2025

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'json_hash': None} values inserted.

The st property was updated, with the {'json_hash': None} values inserted.

The cert property was updated, with the {'json_hash': None} values inserted.

The computed heuristics were updated.

The scheme_data property was set to {'product': 'IBM WebSphere Application Server Version 5.0.2.8', 'id': 'CCEVS-VR-VID4023', 'url': 'https://www.niap-ccevs.org/products/4023', 'api_url': 'https://www.niap-ccevs.org/api/project/product/pcl_products/4023/', 'certification_date': '2004-12-02', 'expiration_date': None, 'category': 'Web Server', 'categories': ['Web Server'], 'vendor': 'IBM Corporation', 'evaluation_facility': 'Leidos Common Criteria Testing Laboratory', 'scheme': 'US'}.
12.05.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to None.
10.02.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to {'product': 'IBM WebSphere Application Server Version 5.0.2.8', 'id': 'CCEVS-VR-VID4023', 'url': 'https://www.niap-ccevs.org/product/4023', 'certification_date': '2004-12-02', 'expiration_date': None, 'category': 'Web Server', 'vendor': 'IBM Corporation', 'evaluation_facility': 'Leidos Common Criteria Testing Laboratory', 'scheme': 'US'}.
05.02.2025

The certificate data changed.
Certificate changed

The protection_profile_links was updated.

This property was added with value {'_type': 'Set', 'elements': []}.

The state of the certificate object was updated.

The report property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The st property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The cert property was updated, with the {'_type': 'sec_certs.sample.document_state.DocumentState'} data.

The computed heuristics were updated.

The following values were inserted: {'protection_profiles': None, 'eal': 'EAL2+'}.

The prev_certificates property was set to None.

The next_certificates property was set to None.

The scheme_data property was set to None.

The Protection Profiles of the certificate were updated.

This property was removed.
06.01.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to {'product': 'IBM WebSphere Application Server Version 5.0.2.8', 'id': 'CCEVS-VR-VID4023', 'url': 'https://www.niap-ccevs.org/product/4023', 'certification_date': '2004-12-02', 'expiration_date': None, 'category': 'Web Server', 'vendor': 'IBM Corporation', 'evaluation_facility': 'Leidos Common Criteria Testing Laboratory', 'scheme': 'US'}.
30.12.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to None.
16.12.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to {'product': 'IBM WebSphere Application Server Version 5.0.2.8', 'id': 'CCEVS-VR-VID4023', 'url': 'https://www.niap-ccevs.org/product/4023', 'certification_date': '2004-12-02', 'expiration_date': None, 'category': 'Web Server', 'vendor': 'IBM Corporation', 'evaluation_facility': 'Leidos Common Criteria Testing Laboratory', 'scheme': 'US'}.
09.12.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to None.
21.11.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The following values were inserted: {'prev_certificates': [], 'next_certificates': []}.
09.11.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The scheme_data property was set to {'product': 'IBM WebSphere Application Server Version 5.0.2.8', 'id': 'CCEVS-VR-VID4023', 'url': 'https://www.niap-ccevs.org/product/4023', 'certification_date': '2004-12-02', 'expiration_date': None, 'category': 'Web Server', 'vendor': 'IBM, Corporation', 'evaluation_facility': 'Leidos Common Criteria Testing Laboratory', 'scheme': 'US'}.
14.10.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2011-1307', 'CVE-2007-4833', 'CVE-2011-1314', 'CVE-2005-3498', 'CVE-2007-1608', 'CVE-2011-1309', 'CVE-2011-1311', 'CVE-2011-1315', 'CVE-2011-1318', 'CVE-2006-7166', 'CVE-2007-5799', 'CVE-2011-1308', 'CVE-2005-4834', 'CVE-2007-3960', 'CVE-2007-5798', 'CVE-2011-1316']} values added.
30.09.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2011-1307', 'CVE-2007-4833', 'CVE-2011-1314', 'CVE-2005-3498', 'CVE-2007-1608', 'CVE-2011-1309', 'CVE-2011-1311', 'CVE-2011-1315', 'CVE-2011-1318', 'CVE-2006-7166', 'CVE-2007-5799', 'CVE-2011-1308', 'CVE-2005-4834', 'CVE-2007-3960', 'CVE-2007-5798', 'CVE-2011-1316']} values discarded.
22.08.2024

The certificate data changed.
Certificate changed

The state of the certificate object was updated.

The report property was updated, with the {'download_ok': True, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': 'f5352c0244eaa695a6209a5a4ba9e6ec2fc9fe450d7aa89e9e97780fc30149ac', 'txt_hash': '90a306b8d58ca29ef98ca780dbbe3557647fbab1f92179c33882c0cd6a920520'} data.

The PDF extraction data was updated.

The report_metadata property was set to {'pdf_file_size_bytes': 307253, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 13, '/Producer': 'Acrobat Distiller 5.0.5 (Windows)', '/Author': 'Santosh Chokhani', '/Creator': 'Acrobat PDFMaker 5.0 for Word', '/ModDate': "D:20041213114215-05'00'", '/Title': 'Validation Report', '/CreationDate': "D:20041213113741-05'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}.

The report_frontpage property was set to {'US': {'cert_id': 'CCEVS-VR-04-0082', 'cert_item': 'IBM WebSphere Application Server', 'cert_lab': 'US NIAP'}}.

The report_keywords property was set to {'cc_cert_id': {'US': {'CCEVS-VR-04-0082': 1}}, 'cc_protection_profile_id': {}, 'cc_security_level': {'EAL': {'EAL 2': 2, 'EAL 1': 1, 'EAL 4': 1, 'EAL2': 14, 'EAL 2 augmented': 1}}, 'cc_sar': {'ALC': {'ALC_FLR.1': 4}, 'ATE': {'ATE_FUN': 1, 'ATE_COV': 1}}, 'cc_sfr': {}, 'cc_claims': {}, 'vendor': {'Microsoft': {'Microsoft': 1}}, 'eval_facility': {}, 'symmetric_crypto': {}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {}, 'crypto_scheme': {}, 'crypto_protocol': {}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}.

The report_filename property was set to st_vid4023-vr.pdf.

The computed heuristics were updated.

The cert_lab property was set to ['US'].

The cert_id property was set to CCEVS-VR-0082-2004.
17.08.2024

The certificate data changed.
Certificate changed

The report_link was updated.

The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid4023-vr.pdf.

The st_link was updated.

The new value is https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid4023-st.pdf.

The state of the certificate object was updated.

The report property was updated, with the {'download_ok': False, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': None, 'txt_hash': None} data.

The PDF extraction data was updated.

The report_metadata property was set to None.

The report_frontpage property was set to None.

The report_keywords property was set to None.

The report_filename property was set to None.

The computed heuristics were updated.

The cert_lab property was set to None.

The cert_id property was set to None.
23.07.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.cc.CCCertificate",
  "category": "Databases",
  "cert_link": null,
  "dgst": "fa1ab0672250550e",
  "heuristics": {
    "_type": "sec_certs.sample.cc_eucc_common.Heuristics",
    "annotated_references": null,
    "cert_id": "CCEVS-VR-0082-2004",
    "cert_lab": [
      "US"
    ],
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:a:ibm:websphere_application_server:5.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:ibm:websphere_application_server:5.0.2.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:ibm:websphere_application_server:5.0:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "eal": "EAL2+",
    "extracted_sars": {
      "_type": "Set",
      "elements": [
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_SOF",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AVA_VLA",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_USR",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_FUN",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_RCR",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_IND",
          "level": 2
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "AGD_ADM",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ALC_FLR",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_FSP",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ADV_HLD",
          "level": 1
        },
        {
          "_type": "sec_certs.sample.sar.SAR",
          "family": "ATE_COV",
          "level": 1
        }
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "5.0.2.8"
      ]
    },
    "indirect_transitive_cves": null,
    "next_certificates": null,
    "prev_certificates": null,
    "protection_profiles": null,
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2007-1944",
        "CVE-2007-6679",
        "CVE-2010-0769",
        "CVE-2008-0389",
        "CVE-2005-3498",
        "CVE-2007-3960",
        "CVE-2006-3232",
        "CVE-2010-0770",
        "CVE-2006-4222",
        "CVE-2008-2550",
        "CVE-2007-5798",
        "CVE-2006-2431",
        "CVE-2006-3231",
        "CVE-2006-4223",
        "CVE-2007-3263",
        "CVE-2011-1308",
        "CVE-2005-4834",
        "CVE-2009-1898",
        "CVE-2009-1901",
        "CVE-2009-1900",
        "CVE-2008-4284",
        "CVE-2006-2435",
        "CVE-2005-0425",
        "CVE-2008-0741",
        "CVE-2006-4136",
        "CVE-2007-4833",
        "CVE-2006-5323",
        "CVE-2011-1314",
        "CVE-2008-4283",
        "CVE-2007-3262",
        "CVE-2010-3271",
        "CVE-2007-1608",
        "CVE-2011-1307",
        "CVE-2009-1899",
        "CVE-2007-3265",
        "CVE-2011-1309",
        "CVE-2011-1316",
        "CVE-2013-0542",
        "CVE-2005-1872",
        "CVE-2011-1311",
        "CVE-2008-5413",
        "CVE-2012-2162",
        "CVE-2006-2436",
        "CVE-2008-0740",
        "CVE-2006-2432",
        "CVE-2006-2430",
        "CVE-2006-7166",
        "CVE-2007-5799",
        "CVE-2010-0768",
        "CVE-2005-2091",
        "CVE-2009-0504",
        "CVE-2011-1315",
        "CVE-2006-5324",
        "CVE-2008-5411",
        "CVE-2011-1318",
        "CVE-2005-1112",
        "CVE-2007-3264",
        "CVE-2008-2221",
        "CVE-2006-1093"
      ]
    },
    "report_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "scheme_data": {
      "api_url": "https://www.niap-ccevs.org/api/project/product/pcl_products/4023/",
      "categories": [
        "Web Server"
      ],
      "category": "Web Server",
      "certification_date": "2004-12-02",
      "evaluation_facility": "Leidos Common Criteria Testing Laboratory",
      "expiration_date": null,
      "id": "CCEVS-VR-VID4023",
      "product": "IBM WebSphere Application Server Version 5.0.2.8",
      "scheme": "US",
      "url": "https://www.niap-ccevs.org/products/4023",
      "vendor": "IBM Corporation"
    },
    "st_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "verified_cpe_matches": null
  },
  "maintenance_updates": {
    "_type": "Set",
    "elements": []
  },
  "manufacturer": "IBM Corporation",
  "manufacturer_web": "https://www.ibm.com",
  "name": "IBM WebSphere Application Server V5.0.2.8",
  "not_valid_after": "2012-09-06",
  "not_valid_before": "2004-12-02",
  "pdf_data": {
    "_type": "sec_certs.sample.cc_eucc_common.PdfData",
    "cert_filename": null,
    "cert_frontpage": null,
    "cert_keywords": null,
    "cert_metadata": null,
    "report_filename": "st_vid4023-vr.pdf",
    "report_frontpage": {
      "US": {
        "cert_id": "CCEVS-VR-04-0082 Dated: December 2, 2004 Version: 1.3",
        "cert_item": "#### IBM WebSphere Application Server",
        "cert_lab": "US NIAP"
      }
    },
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {
        "US": {
          "CCEVS-VR-04-0082": 1
        }
      },
      "cc_claims": {},
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ALC": {
          "ALC_FLR.1": 4
        },
        "ATE": {
          "ATE_COV": 1,
          "ATE_FUN": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL 1": 1,
          "EAL 2": 2,
          "EAL 2 augmented": 1,
          "EAL 4": 1,
          "EAL2": 14
        }
      },
      "cc_sfr": {},
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {},
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "Santosh Chokhani",
      "/CreationDate": "D:20041213113741-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 5.0 for Word",
      "/ModDate": "D:20041213114215-05\u002700\u0027",
      "/Producer": "Acrobat Distiller 5.0.5 (Windows)",
      "/Title": "Validation Report",
      "pdf_file_size_bytes": 307253,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 13
    },
    "st_filename": "st_vid4023-st.pdf",
    "st_frontpage": null,
    "st_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.ADMIN": 3,
          "A.APP": 4,
          "A.PROTECT": 3
        },
        "O": {
          "O.ACCESS": 7,
          "O.ADMIN": 6,
          "O.APP": 7,
          "O.ATTR": 6,
          "O.IDENTIFY": 5,
          "O.MANAGE": 7,
          "O.PROTECT": 8,
          "O.RECOVER": 4
        },
        "T": {
          "T.ACCESS_RES": 3,
          "T.ACCESS_TOE": 3,
          "T.APP": 3,
          "T.NETWORK": 2
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ACM": {
          "ACM_CAP.2": 1
        },
        "ADO": {
          "ADO_DEL.1": 1,
          "ADO_IGS.1": 1
        },
        "ADV": {
          "ADV_FSP.1": 1,
          "ADV_HLD.1": 1,
          "ADV_RCR.1": 1
        },
        "AGD": {
          "AGD_ADM.1": 1,
          "AGD_USR.1": 1
        },
        "ALC": {
          "ALC_FLR.1": 5
        },
        "ATE": {
          "ATE_COV.1": 1,
          "ATE_FUN.1": 1,
          "ATE_IND.2": 1
        },
        "AVA": {
          "AVA_SOF.1": 1,
          "AVA_VLA.1": 1
        }
      },
      "cc_security_level": {
        "EAL": {
          "EAL2": 49,
          "EAL2 augmented": 1
        }
      },
      "cc_sfr": {
        "FDP": {
          "FDP_ACC": 2,
          "FDP_ACC.1": 2,
          "FDP_ACC.2": 5,
          "FDP_ACC.2.1": 2,
          "FDP_ACC.2.2": 2,
          "FDP_ACF": 4,
          "FDP_ACF.1": 4,
          "FDP_ACF.1.1": 2,
          "FDP_ACF.1.2": 2,
          "FDP_ACF.1.3": 2,
          "FDP_ACF.1.4": 2
        },
        "FIA": {
          "FIA_ATD": 6,
          "FIA_ATD.1": 1,
          "FIA_UID": 1,
          "FIA_UID.1": 1,
          "FIA_UID.2": 5,
          "FIA_UID.2.1": 2,
          "FIA_USB": 1,
          "FIA_USB.1": 5,
          "FIA_USB.1.1": 2
        },
        "FMT": {
          "FMT_MSA": 6,
          "FMT_MSA.1": 7,
          "FMT_MSA.1.1": 2,
          "FMT_MSA.3": 6,
          "FMT_MSA.3.1": 3,
          "FMT_MSA.3.2": 3,
          "FMT_SMF": 1,
          "FMT_SMF.1": 3,
          "FMT_SMF.1.1": 2,
          "FMT_SMR": 1,
          "FMT_SMR.1": 5,
          "FMT_SMR.1.1": 2,
          "FMT_SMR.1.2": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCIMB-99-031": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        }
      },
      "vulnerability": {}
    },
    "st_metadata": {
      "/Author": "Mark Bellis",
      "/CreationDate": "D:20041214074756-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 5.0 for Word",
      "/ModDate": "D:20041214074956-05\u002700\u0027",
      "/Producer": "Acrobat Distiller 5.0.5 (Windows)",
      "/Title": "Websphere Application Server EAL2 Security Target",
      "pdf_file_size_bytes": 729513,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 40
    }
  },
  "protection_profile_links": {
    "_type": "Set",
    "elements": []
  },
  "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid4023-vr.pdf",
  "scheme": "US",
  "security_level": {
    "_type": "Set",
    "elements": [
      "ALC_FLR.1",
      "EAL2+"
    ]
  },
  "st_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid4023-st.pdf",
  "state": {
    "_type": "sec_certs.sample.cc_eucc_common.InternalState",
    "cert": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": false,
      "download_ok": false,
      "extract_ok": false,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4abc8861061ba7b4bce243c41e0b8a558f8e58868a9b818307f30624dd0c53fe",
      "source_hash": "f5352c0244eaa695a6209a5a4ba9e6ec2fc9fe450d7aa89e9e97780fc30149ac",
      "txt_hash": "b4d981824d3b096728648ec48fad584ec07dfc5f54edc45ad795875aee09eb2a"
    },
    "st": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "50cb8a257489006b431cb8a0c4780b7398c688ef15a5e8d8d09f6cebc99f8300",
      "source_hash": "a3f5d236774dff9f5d7e5a3e139425b45620e1f5cc638aeb243b622302587bd2",
      "txt_hash": "7148478556962d450531f2356a665e8cbb1f8e75813a62f321503c9b462bd254"
    }
  },
  "status": "archived"
}

Sections

IBM WebSphere Application Server V5.0.2.8

Known vulnerabilities detected

Certificate details

Certificate

Certification report

Extracted keywords

Device

Vendor

Common Criteria

Security level

Security Assurance Requirements (SAR)

Certificates

Frontpage

File metadata

Security target

Extracted keywords

Cryptography

Protocols

Device

Vendor

Common Criteria

Security level

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Certificate ID

Extracted SARs

CPE matches

CVE matches

Scheme data

Cross-references

Processing updates

Raw data

Toggle raw data