CVE-2016-8919

N/A

Published: February 1, 2017 at 10:00 PM UTC

Updated: June 17, 2026 at 12:55 AM UTC

1 product affected across 1 vendorWebSphere Application Server

Using WebSphere Application Server by IBM Corporation?

Get instant alerts when new vulnerabilities affect WebSphere Application Server - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

WebSphere Application Server · IBM

95%

1.0 1.0.0.1 1.0.1 1.0.1.1 1.0.1.2 1.1 1.1.0.1 1.1.0.2 2.0 2.1 3.0 3.0.0.3 3.0.0.4 3.0.2 3.0.2.1 3.0.2.2 3.0.2.3 3.0.2.4 3.0.21 3.5 3.5.1 3.5.2 3.5.3 3.52 4.0.1 4.0.2 4.0.3 4.0.4 5.0 5.0.0 5.0.1 5.0.2 5.0.2.1 5.0.2.10 5.0.2.11 5.0.2.12 5.0.2.13 5.0.2.14 5.0.2.15 5.0.2.16 5.0.2.2 5.0.2.3 5.0.2.4 5.0.2.5 5.0.2.6 5.0.2.7 5.0.2.8 5.0.2.9 5.1 5.1.0.1 5.1.0.2 5.1.0.3 5.1.0.4 5.1.0.5 5.1.1 5.1.1.1 5.1.1.10 5.1.1.11 5.1.1.12 5.1.1.13 5.1.1.14 5.1.1.15 5.1.1.16 5.1.1.17 5.1.1.18 5.1.1.2 5.1.1.3 5.1.1.4 5.1.1.5 5.1.1.6 5.1.1.7 5.1.1.8 5.1.1.9 5.3 6.0 6.0.0.1 6.0.0.2 6.0.0.3 6.0.1 6.0.1.1 6.0.1.11 6.0.1.13 6.0.1.15 6.0.1.17 6.0.1.2 6.0.1.3 6.0.1.5 6.0.1.7 6.0.1.9 6.0.2 6.0.2.1 6.0.2.10 6.0.2.11 6.0.2.12 6.0.2.13 6.0.2.14 6.0.2.15 6.0.2.16 6.0.2.17 6.0.2.18 6.0.2.19 6.0.2.2 6.0.2.20 6.0.2.21 6.0.2.22 6.0.2.23 6.0.2.24 6.0.2.25 6.0.2.26 6.0.2.27 6.0.2.28 6.0.2.29 6.0.2.3 6.0.2.30 6.0.2.31 6.0.2.32 6.0.2.33 6.0.2.35 6.0.2.37 6.0.2.39 6.0.2.4 6.0.2.5 6.0.2.6 6.0.2.7 6.0.2.8 6.0.2.9 6.1 6.1.0 6.1.0.0 6.1.0.1 6.1.0.10 6.1.0.11 6.1.0.12 6.1.0.13 6.1.0.14 6.1.0.15 6.1.0.16 6.1.0.17 6.1.0.18 6.1.0.19 6.1.0.2 6.1.0.20 6.1.0.21 6.1.0.22 6.1.0.23 6.1.0.24 6.1.0.25 6.1.0.26 6.1.0.27 6.1.0.29 6.1.0.3 6.1.0.31 6.1.0.33 6.1.0.35 6.1.0.37 6.1.0.39 6.1.0.4 6.1.0.41 6.1.0.5 6.1.0.6 6.1.0.7 6.1.0.8 6.1.0.9 6.1.1 6.1.13 6.1.14 6.1.3 6.1.5 6.1.6 6.1.7 6.10.17 6.1W 7.0 7.0.0 7.0.0.1 7.0.0.11 7.0.0.13 7.0.0.15 7.0.0.17 7.0.0.19 7.0.0.2 7.0.0.21 7.0.0.23 7.0.0.3 7.0.0.4 7.0.0.5 7.0.0.6 7.0.0.7 7.0.0.8 7.0.0.9 7.1 7.2 8.0 8.0.0 8.0.0.0 8.0.0.1 8.5 8.5.5 9.0 9.0.0.0 Applicable Not

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://www.ibm.com/support/docview.wss?uid=swg21993797

References (3)

x_refsource_CONFIRMPatchVendor Advisory

Source: [email protected]

http://www.ibm.com/support/docview.wss?uid=swg21993797

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/95650

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1037710

CVSS

7.8HIGH[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card