CVE-2008-2550

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-04 · updated 2026-06-16

Description

Unspecified vulnerability in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.17 has unknown impact and attack vectors related to an attribute in the SOAP security header.

Affected products

IBM WebSphere Application Server: through 6.1.0.16; 6.1, 6.1.0, 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3 (+12)

References

http://secunia.com/advisories/30526
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315
http://www.securitytracker.com/id?1020168
http://www.vupen.com/english/advisories/2008/1734
https://exchange.xforce.ibmcloud.com/vulnerabilities/42822
http://secunia.com/advisories/30526
http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg1PK61315
http://www.securitytracker.com/id?1020168
http://www.vupen.com/english/advisories/2008/1734
https://exchange.xforce.ibmcloud.com/vulnerabilities/42822

Get alerted when CVE-2008-2550 or the next vulnerability affects your stack