CVE-2009-2087
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and...
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
- Record
CVE-2009-2087- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
- Record
CVE-2009-2087- Updated
- 2026-11-02
EUVDEUVD-2009-2083 No score
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
- Record
EUVD-2009-2083- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9f8-cvc2-r5mx No score
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and...
The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.
- Record
GHSA-m9f8-cvc2-r5mx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2087 is a low vulnerability (CVSS 2.1) in Ibm Websphere Application Server, published August 13, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.
References
www-01.ibm.com/support/docview.wss?uid=swg27007951
www-1.ibm.com/support/docview.wss?uid=swg1PK79275
exchange.xforce.ibmcloud.com/vulnerabilities/52078
secunia.com/advisories/34461
nvd.nist.gov/vuln/detail/CVE-2009-2087
github.com/advisories/GHSA-m9f8-cvc2-r5mx