High severity7.5NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026
CVE-2021-38951
CVE-2021-38951
Description
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 211405.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*
- (no CPE)range: 7.0, 8.0, 8.5, and 9.0
- (no CPE)range: 7.0
Patches
Vulnerability mechanics
References
2- exchange.xforce.ibmcloud.com/vulnerabilities/211405nvdVDB EntryVendor Advisory
- www.ibm.com/support/pages/node/6524674nvdVendor Advisory
News mentions
0No linked articles in our index yet.