CVE-2009-1900: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The Configservice APIs in the Administrative Console component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.25, and 7.0 before 7.0.0.5, when tracing is enabled, allow remote attackers to obtain sensitive information via unspecified use of the wsadmin scripting tool.

Affected products

• IBM WebSphere Application Server: up to and including 6.0.2.33; version 6.0.2 only; version 6.0.2.1 only; version 6.0.2.2 only; version 6.0.2.3 only; version 6.0.2.4 only; …

Published 2009-06-03. Last modified 2026-06-16.