CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2747

The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2009-2747

Ibm » Websphere Application Server » Version: 6.0

cpe:2.3:a:ibm:websphere_application_server:6.0
Ibm » Websphere Application Server » Version: 6.0.0.1

cpe:2.3:a:ibm:websphere_application_server:6.0.0.1
Ibm » Websphere Application Server » Version: 6.0.0.2

cpe:2.3:a:ibm:websphere_application_server:6.0.0.2
Ibm » Websphere Application Server » Version: 6.0.0.3

cpe:2.3:a:ibm:websphere_application_server:6.0.0.3
Ibm » Websphere Application Server » Version: 6.0.1

cpe:2.3:a:ibm:websphere_application_server:6.0.1
Ibm » Websphere Application Server » Version: 6.0.1.1

cpe:2.3:a:ibm:websphere_application_server:6.0.1.1
Ibm » Websphere Application Server » Version: 6.0.1.11

cpe:2.3:a:ibm:websphere_application_server:6.0.1.11
Ibm » Websphere Application Server » Version: 6.0.1.13

cpe:2.3:a:ibm:websphere_application_server:6.0.1.13
Ibm » Websphere Application Server » Version: 6.0.1.15

cpe:2.3:a:ibm:websphere_application_server:6.0.1.15
Ibm » Websphere Application Server » Version: 6.0.1.17

cpe:2.3:a:ibm:websphere_application_server:6.0.1.17
Ibm » Websphere Application Server » Version: 6.0.1.2

cpe:2.3:a:ibm:websphere_application_server:6.0.1.2
Ibm » Websphere Application Server » Version: 6.0.1.3

cpe:2.3:a:ibm:websphere_application_server:6.0.1.3
Ibm » Websphere Application Server » Version: 6.0.1.5

cpe:2.3:a:ibm:websphere_application_server:6.0.1.5
Ibm » Websphere Application Server » Version: 6.0.1.7

cpe:2.3:a:ibm:websphere_application_server:6.0.1.7
Ibm » Websphere Application Server » Version: 6.0.1.9

cpe:2.3:a:ibm:websphere_application_server:6.0.1.9
Ibm » Websphere Application Server » Version: 6.0.2

cpe:2.3:a:ibm:websphere_application_server:6.0.2
Ibm » Websphere Application Server » Version: 6.0.2.1

cpe:2.3:a:ibm:websphere_application_server:6.0.2.1
Ibm » Websphere Application Server » Version: 6.0.2.11

cpe:2.3:a:ibm:websphere_application_server:6.0.2.11
Ibm » Websphere Application Server » Version: 6.0.2.13

cpe:2.3:a:ibm:websphere_application_server:6.0.2.13
Ibm » Websphere Application Server » Version: 6.0.2.15

cpe:2.3:a:ibm:websphere_application_server:6.0.2.15
Ibm » Websphere Application Server » Version: 6.0.2.17

cpe:2.3:a:ibm:websphere_application_server:6.0.2.17
Ibm » Websphere Application Server » Version: 6.0.2.19

cpe:2.3:a:ibm:websphere_application_server:6.0.2.19
Ibm » Websphere Application Server » Version: 6.0.2.2

cpe:2.3:a:ibm:websphere_application_server:6.0.2.2
Ibm » Websphere Application Server » Version: 6.0.2.22

cpe:2.3:a:ibm:websphere_application_server:6.0.2.22
Ibm » Websphere Application Server » Version: 6.0.2.23

cpe:2.3:a:ibm:websphere_application_server:6.0.2.23
Ibm » Websphere Application Server » Version: 6.0.2.24

cpe:2.3:a:ibm:websphere_application_server:6.0.2.24
Ibm » Websphere Application Server » Version: 6.0.2.25

cpe:2.3:a:ibm:websphere_application_server:6.0.2.25
Ibm » Websphere Application Server » Version: 6.0.2.27

cpe:2.3:a:ibm:websphere_application_server:6.0.2.27
Ibm » Websphere Application Server » Version: 6.0.2.28

cpe:2.3:a:ibm:websphere_application_server:6.0.2.28
Ibm » Websphere Application Server » Version: 6.0.2.29

cpe:2.3:a:ibm:websphere_application_server:6.0.2.29
Ibm » Websphere Application Server » Version: 6.0.2.3

cpe:2.3:a:ibm:websphere_application_server:6.0.2.3
Ibm » Websphere Application Server » Version: 6.0.2.30

cpe:2.3:a:ibm:websphere_application_server:6.0.2.30
Ibm » Websphere Application Server » Version: 6.0.2.31

cpe:2.3:a:ibm:websphere_application_server:6.0.2.31
Ibm » Websphere Application Server » Version: 6.0.2.32

cpe:2.3:a:ibm:websphere_application_server:6.0.2.32
Ibm » Websphere Application Server » Version: 6.0.2.33

cpe:2.3:a:ibm:websphere_application_server:6.0.2.33
Ibm » Websphere Application Server » Version: 6.0.2.35

cpe:2.3:a:ibm:websphere_application_server:6.0.2.35
Ibm » Websphere Application Server » Version: 6.0.2.37

cpe:2.3:a:ibm:websphere_application_server:6.0.2.37
Ibm » Websphere Application Server » Version: 6.0.2.4

cpe:2.3:a:ibm:websphere_application_server:6.0.2.4
Ibm » Websphere Application Server » Version: 6.0.2.5

cpe:2.3:a:ibm:websphere_application_server:6.0.2.5
Ibm » Websphere Application Server » Version: 6.0.2.6

cpe:2.3:a:ibm:websphere_application_server:6.0.2.6
Ibm » Websphere Application Server » Version: 6.0.2.7

cpe:2.3:a:ibm:websphere_application_server:6.0.2.7
Ibm » Websphere Application Server » Version: 6.0.2.9

cpe:2.3:a:ibm:websphere_application_server:6.0.2.9
Ibm » Websphere Application Server » Version: 6.1.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0
Ibm » Websphere Application Server » Version: 6.1.0.0

cpe:2.3:a:ibm:websphere_application_server:6.1.0.0
Ibm » Websphere Application Server » Version: 6.1.0.1

cpe:2.3:a:ibm:websphere_application_server:6.1.0.1
Ibm » Websphere Application Server » Version: 6.1.0.11

cpe:2.3:a:ibm:websphere_application_server:6.1.0.11
Ibm » Websphere Application Server » Version: 6.1.0.12

cpe:2.3:a:ibm:websphere_application_server:6.1.0.12
Ibm » Websphere Application Server » Version: 6.1.0.15

cpe:2.3:a:ibm:websphere_application_server:6.1.0.15
Ibm » Websphere Application Server » Version: 6.1.0.17

cpe:2.3:a:ibm:websphere_application_server:6.1.0.17
Ibm » Websphere Application Server » Version: 6.1.0.19

cpe:2.3:a:ibm:websphere_application_server:6.1.0.19
Ibm » Websphere Application Server » Version: 6.1.0.2

cpe:2.3:a:ibm:websphere_application_server:6.1.0.2
Ibm » Websphere Application Server » Version: 6.1.0.21

cpe:2.3:a:ibm:websphere_application_server:6.1.0.21
Ibm » Websphere Application Server » Version: 6.1.0.23

cpe:2.3:a:ibm:websphere_application_server:6.1.0.23
Ibm » Websphere Application Server » Version: 6.1.0.25

cpe:2.3:a:ibm:websphere_application_server:6.1.0.25
Ibm » Websphere Application Server » Version: 6.1.0.27

cpe:2.3:a:ibm:websphere_application_server:6.1.0.27
Ibm » Websphere Application Server » Version: 6.1.0.5

cpe:2.3:a:ibm:websphere_application_server:6.1.0.5
Ibm » Websphere Application Server » Version: 6.1.0.7

cpe:2.3:a:ibm:websphere_application_server:6.1.0.7
Ibm » Websphere Application Server » Version: 6.1.0.9

cpe:2.3:a:ibm:websphere_application_server:6.1.0.9
Ibm » Websphere Application Server » Version: 7.0

cpe:2.3:a:ibm:websphere_application_server:7.0
Ibm » Websphere Application Server » Version: 7.0.0.1

cpe:2.3:a:ibm:websphere_application_server:7.0.0.1
Ibm » Websphere Application Server » Version: 7.0.0.2

cpe:2.3:a:ibm:websphere_application_server:7.0.0.2
Ibm » Websphere Application Server » Version: 7.0.0.3

cpe:2.3:a:ibm:websphere_application_server:7.0.0.3
Ibm » Websphere Application Server » Version: 7.0.0.4

cpe:2.3:a:ibm:websphere_application_server:7.0.0.4
Ibm » Websphere Application Server » Version: 7.0.0.5

cpe:2.3:a:ibm:websphere_application_server:7.0.0.5
Ibm » Websphere Application Server » Version: 7.0.0.6

cpe:2.3:a:ibm:websphere_application_server:7.0.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2747

Products

Pricing

Contact Us