Not rated
CVE-2016-8919 IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from…
Description
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server 9.0 | 9.0 → 9.0.0.0 | No fix stated |
| WebSphere Application Server 8.5 | 8.5 → 8.5.5 | No fix stated |
| WebSphere Application Server 8.0 | 8.0 → 8.0.0.1 | No fix stated |
| WebSphere Application Server | 7.2 | No fix stated |
| WebSphere Application Server | 7.1 | No fix stated |
| WebSphere Application Server 7.0 | 7.0 → 7.0.0.23 | No fix stated |
| WebSphere Application Server | 6.10.17 | No fix stated |
| WebSphere Application Server 6.1 | 6.1W → 6.1.14 | No fix stated |
| WebSphere Application Server 6.0 | 6.0 → 6.0.2.39 | No fix stated |
Show the 11 other branches Hide the 11 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server | 5.3 | No fix stated |
| WebSphere Application Server 5.1 | 5.1 → 5.1.1.18 | No fix stated |
| WebSphere Application Server 5.0 | 5.0 → 5.0.2.16 | No fix stated |
| WebSphere Application Server 4.0 | 4.0.1 → 4.0.4 | No fix stated |
| WebSphere Application Server | 3.52 | No fix stated |
| WebSphere Application Server 3.5 | 3.5 → 3.5.3 | No fix stated |
| WebSphere Application Server 3.0 | 3.0 → 3.0.21 | No fix stated |
| WebSphere Application Server | 2.1 | No fix stated |
| WebSphere Application Server | 2.0 | No fix stated |
| WebSphere Application Server 1.1 | 1.1 → 1.1.0.2 | No fix stated |
| WebSphere Application Server 1.0 | 1.0 → 1.0.1.2 | No fix stated |
Other CVEs of WebSphere Application Server
The 4 CVEs of WebSphere Application Server →
CVE-2017-1137
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security
Not rated
CVE-2017-1151
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust…
Not rated
CVE-2017-1121
IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting
Not rated