CVE-2007-3262

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-19 · updated 2026-06-16

Description

Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier allows remote attackers to cause a denial of service related to a thread hang, and possibly related to a "TCP issue," or to MPAlarmThread and a resultant memory leak.

Affected products

IBM WebSphere Application Server: through 6.1.0.7

References

http://osvdb.org/41614
http://secunia.com/advisories/25704
http://www-1.ibm.com/support/docview.wss?uid=swg27007951
http://www.securityfocus.com/bid/24505
http://www.vupen.com/english/advisories/2007/2234
https://exchange.xforce.ibmcloud.com/vulnerabilities/34903
http://osvdb.org/41614
http://secunia.com/advisories/25704
http://www-1.ibm.com/support/docview.wss?uid=swg27007951
http://www.securityfocus.com/bid/24505
http://www.vupen.com/english/advisories/2007/2234
https://exchange.xforce.ibmcloud.com/vulnerabilities/34903

Get alerted when CVE-2007-3262 or the next vulnerability affects your stack