CVE-2016-5983

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

13.762

Associated Vulnerability

Vulnerability	OS Platform
Update websphere_application_server 9.0.0.1 to latest version	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.2.3	Windows
Multiple Vulnerabilities are affected in IBM Tivoli Monitoring 6.3.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.2.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.1.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Controller 10.1.0	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.5.0	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234