CVE-2008-4285: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to "a gradual degradation in performance."

Affected products

• IBM WebSphere Application Server: version 6.1 only; version 6.1.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.5 only; …

Published 2009-02-17. Last modified 2026-06-16.