SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2008-2550

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.

MEDIUM 5.0EPSS 1.64%

Does this matter?

Lower severity and a low EPSS score (1.64%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
1.64% probability · 75th percentile
CISA KEV
Not listed
Affected
ibm/websphere application server
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.