VulnIntel

CVE-2008-7261

CVSS 2.1 · LOW
EPSS p16
Lower risk — in the top 84% least-likely-to-be-exploited CVEs.
No patch reference
No patch/mitigation in references

Published 9/20/2010 · updated 4/29/2026 · CWE-255

Share
Get asset-aware triage

Summary

The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-010 records DEBUG messages containing user credentials in the log4j.xml file, which might allow local users to obtain sensitive information by reading this file.

CVSS 2.1 — LOW

2.1 / 10
  • AV: Local
  • AC: Low complexity
  • I: Integrity: None
  • A: Availability: None

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS exploitation probability

0.1%

Percentile p16 — Lower risk — in the top 84% least-likely-to-be-exploited CVEs.

Affected products

1 vendor/product entries
  • Ibm Filenet P8 Application Enginev3.5.1
Do you run any of these? Sign in to match this CVE against your SBOM and asset inventory automatically.

Timeline

  1. Sep 20, 2010 · Disclosed / published in NVD
  2. Apr 29, 2026 · Intel last updated

Intel sources

Which upstream feeds returned data for this CVE, and when they were last fetched.

  • NVD· 60 days ago
  • CVE.org· no data
  • FIRST EPSS· 60 days ago
  • CISA KEV· no data
  • OSV· 57 days ago

References

Other2

Unlock the full report

See how CVE-2008-7261 hits your stack.

Free public data ends here. Sign in to correlate this CVE against your SBOM and assets, get an AI-grounded exploit chain, generate a ModSecurity virtual patch, and share findings with your team.

  • · Asset-aware CVSS & priority
  • · Grounded AI analysis (A–D graded)
  • · Auto-generated WAF / IPS rules
  • · Jira, SIEM, Slack, Teams delivery

No credit card · 100 free enrichments · analyst-grade citations.