CVE-2007-3960 Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security expos...

HighCVSS 9.3 EPSS 1.9%

Published: 2007-07-24 21:00
Updated: 2026-06-17 01:43
Exploit status: No public exploit known

Description

Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack vectors, aka (1) PK33799, or (2) a "Potential security exposure" in the Samples component (PK40213).

Affected products

Product	Affected versions	Fixed in
ibm websphere application server	<= 6.0.2.19	No fix listed

References

41615 vdb-entry
44217 vdb-entry
26183 patch third-party-advisory vendor-advisory
PK33799 vendor-advisory
1018448 vdb-entry
ADV-2007-2626 vdb-entry

CVSS v2.0

9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.93% (percentile 80.3)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.