CVE-2008-4285

Unspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19, when a component statistic is enabled, allows attackers to cause a denial of service (daemon crash) via vectors related to "a gradual degradation in performance."

• CWE-399

• http://www-01.ibm.com/support/docview.wss?uid=swg24019260Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48698
• http://www-01.ibm.com/support/docview.wss?uid=swg24019260Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48698

Published

Feb 17, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4277Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2008-4278VMware VirtualCenter 2.5 before Update 3 build 119838 on Win…
• CVE-2008-4279The CPU hardware emulation for 64-bit guest operating system…
• CVE-2008-4281Directory traversal vulnerability in VMWare ESXi 3.5 before …
• CVE-2008-4283CRLF injection vulnerability in the WebContainer component i…
• CVE-2008-4284Open redirect vulnerability in the ibm_security_logout servl…
• CVE-2008-4292Opera before 9.52 does not check the CRL override upon encou…
• CVE-2008-4293Unspecified vulnerability in Opera before 9.52 on Windows, w…
• CVE-2008-4294IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cache…
• CVE-2008-4295Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 812…
• CVE-2008-4296The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" …
• CVE-2008-4297Mercurial before 1.0.2 does not enforce the allowpull permis…