CVE-2008-5413: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434.

Affected products

• IBM WebSphere Application Server: up to and including 7.0

Published 2008-12-10. Last modified 2026-06-16.