CVE-2008-4111

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-09-16 · updated 2026-06-16

Description

Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.

Affected products

IBM WebSphere Application Server: 6.1, 6.1.0, 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3 (+15)

References

http://secunia.com/advisories/31892
http://secunia.com/advisories/32296
http://www-01.ibm.com/support/docview.wss?uid=swg27006876
http://www-01.ibm.com/support/docview.wss?uid=swg27007951
http://www-1.ibm.com/support/docview.wss?uid=swg1PK64302
http://www.securityfocus.com/bid/31186
http://www.securityfocus.com/bid/31839
http://www.vupen.com/english/advisories/2008/2566
http://www.vupen.com/english/advisories/2008/2871
https://exchange.xforce.ibmcloud.com/vulnerabilities/45122
http://secunia.com/advisories/31892
http://secunia.com/advisories/32296

Get alerted when CVE-2008-4111 or the next vulnerability affects your stack