CVE-2006-5324

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-17 · updated 2026-06-16

Description

The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374.

Affected products

IBM WebSphere Application Server: through 6.1.0.1

References

http://secunia.com/advisories/22372
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only
http://www.vupen.com/english/advisories/2006/4000
http://secunia.com/advisories/22372
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only
http://www.vupen.com/english/advisories/2006/4000

Get alerted when CVE-2006-5324 or the next vulnerability affects your stack