CVE-2009-1899: IBM WebSphere Application Server

High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Administrative Configservice API in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5 on z/OS allows remote authenticated users to obtain sensitive information via unknown use of the wsadmin scripting tool, related to a "security exposure in wsadmin."

Affected products

• IBM WebSphere Application Server: up to and including 6.0.2.33; version 6.0.2 only; version 6.0.2.1 only; version 6.0.2.2 only; version 6.0.2.3 only; version 6.0.2.4 only; …

Published 2009-06-03. Last modified 2026-06-16.