CVE-2011-1377 json
The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does no…
published 2012-01-15 14 y ago modified 2026-06-16 4 mo ago also EUVD-2011-1384
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.3%
- EPSS 2.3% chance of exploitation in 30 days, percentile 83%
- public exploits
- 0
- none known
Summary
The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly handle the enabling of WS-Security for a JAX-WS application, which has unspecified impact and attack vectors.
Exploit prediction
2.32% chance of exploitation in the next 30 days, higher than 83% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM43792
vendor-advisory
-
www-01.ibm.com
/support/docview.wss?uid=swg1PM50205
vendor-advisory
-
secunia.com
/advisories/46469
third-party-advisory, vendor-advisory
- www-01.ibm.com /support/docview.wss?uid=swg27011716
-
exchange.xforce.ibmcloud.com
/vulnerabilities/72299
vdb-entry
-
securityfocus.com
/bid/50310
vdb-entry
Sources
- CVE List CVE-2011-1377
- NVD CVE-2011-1377
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.