Vulnerability Details CVE-2008-4285
Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to "a gradual degradation in performance."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.3%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2008-4285
-
cpe:2.3:a:ibm:websphere_application_server:6.1
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.1
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.11
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.15
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.17
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.2
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.3
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.5
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.7
-
cpe:2.3:a:ibm:websphere_application_server:6.1.0.9
-
cpe:2.3:a:ibm:websphere_application_server:6.1.13