CVE-2009-1953

no score yetEPSS 0.9%

ibm filenet content manager: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-06-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:filenet_content_manager

References

http://secunia.com/advisories/35347
http://www-01.ibm.com/support/docview.wss?uid=swg21389281
http://www.securityfocus.com/bid/35228
http://www.vupen.com/english/advisories/2009/1512
http://secunia.com/advisories/35347

Check your stack JSON