CVE-2008-2550

critical

Description

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/42822

http://www.vupen.com/english/advisories/2008/1734

http://www.securitytracker.com/id?1020168

http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315

http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951

http://secunia.com/advisories/30526

Details

Source: Mitre, NVD

Published: 2008-06-04

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.00487

Detections

Analytics