CVE-2016-5986

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21990056Patch, Vendor Advisory
http://www.securityfocus.com/bid/93013
http://www.securitytracker.com/id/1036838
http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093Not Applicable
http://www-01.ibm.com/support/docview.wss?uid=swg21990056Patch, Vendor Advisory
http://www.securityfocus.com/bid/93013
http://www.securitytracker.com/id/1036838

Timeline

Published: Oct 1, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-59875.3IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.10 IF4, and 7.6 before 7.6.0.5 IF3 allows remote attackers to obtain sens CVE-2016-59886.5IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be av CVE-2016-59906.3IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automaticall CVE-2016-59914.5IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to gain pri CVE-2016-59922.5IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0.4 on Windows allows local users to cause a CVE-2016-59946.5IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and CVE-2016-59957.3Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX all CVE-2016-59967.5The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, CVE-2016-59976.5The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, CVE-2016-60006.1IBM TRIRIGA Application Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i CVE-2016-60013.1IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for CVE-2016-60184.3IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain addi