CVE-2016-2960
low · 3.7IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages.
3.7
CVSS
39.6%
EPSS (exploit prob.)
99th
EPSS percentile
2016-08-08
Published
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-284
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ibm | websphere_application_server | 7.0 |
| ibm | websphere_application_server | 7.0.0.0 |
| ibm | websphere_application_server | 7.0.0.1 |
| ibm | websphere_application_server | 7.0.0.2 |
| ibm | websphere_application_server | 7.0.0.3 |
| ibm | websphere_application_server | 7.0.0.4 |
| ibm | websphere_application_server | 7.0.0.5 |
| ibm | websphere_application_server | 7.0.0.6 |
| ibm | websphere_application_server | 7.0.0.7 |
| ibm | websphere_application_server | 7.0.0.8 |
| ibm | websphere_application_server | 7.0.0.9 |
| ibm | websphere_application_server | 7.0.0.10 |
| ibm | websphere_application_server | 7.0.0.11 |
| ibm | websphere_application_server | 7.0.0.12 |
| ibm | websphere_application_server | 7.0.0.13 |
| ibm | websphere_application_server | 7.0.0.14 |
| ibm | websphere_application_server | 7.0.0.15 |
| ibm | websphere_application_server | 7.0.0.16 |
| ibm | websphere_application_server | 7.0.0.17 |
| ibm | websphere_application_server | 7.0.0.18 |
| ibm | websphere_application_server | 7.0.0.19 |
| ibm | websphere_application_server | 7.0.0.21 |
| ibm | websphere_application_server | 7.0.0.22 |
| ibm | websphere_application_server | 7.0.0.23 |
| ibm | websphere_application_server | 7.0.0.24 |
| ibm | websphere_application_server | 7.0.0.25 |
| ibm | websphere_application_server | 7.0.0.27 |
| ibm | websphere_application_server | 7.0.0.28 |
| ibm | websphere_application_server | 7.0.0.29 |
| ibm | websphere_application_server | 7.0.0.31 |
| ibm | websphere_application_server | 7.0.0.32 |
| ibm | websphere_application_server | 7.0.0.33 |
| ibm | websphere_application_server | 7.0.0.34 |
| ibm | websphere_application_server | 7.0.0.35 |
| ibm | websphere_application_server | 7.0.0.36 |
| ibm | websphere_application_server | 7.0.0.37 |
| ibm | websphere_application_server | 7.0.0.38 |
| ibm | websphere_application_server | 7.0.0.39 |
| ibm | websphere_application_server | 7.0.0.41 |
| ibm | websphere_application_server | 8.0 |
Check a specific version with /api/v1/cve/match.
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI61548
- http://www-01.ibm.com/support/docview.wss?uid=swg21984796
- http://www.securityfocus.com/bid/92354
- http://www.securitytracker.com/id/1036514
- http://www-01.ibm.com/support/docview.wss?uid=swg1PI61548
- http://www-01.ibm.com/support/docview.wss?uid=swg21984796
- http://www.securityfocus.com/bid/92354
- http://www.securitytracker.com/id/1036514
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-2960