Lucene search

MitreCVE-2007-3960

HistoryJul 24, 2007 - 6:30 p.m.

CVE-2007-3960

2007-07-2418:30:00

mitre

web.nvd.nist.gov

cve-2007-3960

ibm websphere

application server

vulnerabilities

fix pack 21

nvd

security exposure

pk33799

pk40213

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0.006

Percentile

79.2%

JSON

Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a “Potential security exposure” in the Samples component (PK40213).

Affected configurations

Nvd

Node

ibmwebsphere_application_serverRange≤6.0.2.19

VendorProductVersionCPE
ibmwebsphere_application_server*cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_application_server	*	cpe:2.3:a:ibm:websphere_application_server::::::::

References

osvdb.org/41615

osvdb.org/44217

secunia.com/advisories/26183

www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876

www.securitytracker.com/id?1018448

www.vupen.com/english/advisories/2007/2626

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0.006

Percentile

79.2%

JSON

Related for CVE-2007-3960