CVE-2016-5983

7.5 highEPSS 4.1%

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2016-10-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:websphere_application_server

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375
http://www.securityfocus.com/bid/93162
https://www-01.ibm.com/support/docview.wss?uid=swg21990060
http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375
http://www.securityfocus.com/bid/93162

Check your stack JSON