CVE-2016-5983

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

Score

CVSS 3.0 7.5 High

Status

Modified - psirt@us.ibm.com

Published

2016-10-05

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Websphere Application Server (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375
• http://www.securityfocus.com/bid/93162
• https://www-01.ibm.com/support/docview.wss?uid=swg21990060