CVE-2013-4053

no score yetEPSS 1.3%

The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2013-09-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:websphere_application_server
ibm:websphere_application_server_feature_pack_for_web_services

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949
http://www-01.ibm.com/support/docview.wss?uid=swg1PM91521
http://www.ibm.com/support/docview.wss?uid=swg21647522
https://exchange.xforce.ibmcloud.com/vulnerabilities/86505
http://www-01.ibm.com/support/docview.wss?uid=swg1PM90949

Check your stack JSON