Every CVESearch/Get API key

CVE-2009-1174

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2...

10.0 High

CVE-2009-1174 is a high vulnerability (CVSS 10.0) in Ibm Websphere Application Server, published March 31, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 84th percentile. No source names a fixed version.

Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
2.36%EPSS, 84th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Exploit likelihood

2.36%Up 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used10.0

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Record
CVE-2009-1174
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-310
Updated
2026-11-02
CVE ListNo score

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Record
CVE-2009-1174
Updated
2026-11-02
EUVDEUVD-2009-1174No score

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Record
EUVD-2009-1174
Updated
2026-11-03
GitHub AdvisoriesGHSA-f454-gp59-g2j5No score

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2...

The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified "security problem" in the XML digital-signature specification, which has unknown impact and attack vectors.

Record
GHSA-f454-gp59-g2j5
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 5 moreShow less
MoveEnter Open