CVE-2006-4136

critical

Description

Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.

References

http://www.vupen.com/english/advisories/2006/3262

http://www.securityfocus.com/bid/19463

http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only

http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only

http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951

http://secunia.com/advisories/21440

Details

Source: Mitre, NVD

Published: 2006-08-14

Updated: 2026-04-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00639

Detections

Analytics