CVE-2008-5411: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.

Affected products

• IBM WebSphere Application Server: up to and including 7.0

Published 2008-12-10. Last modified 2026-06-16.