CVE-2016-5986

7.5 highEPSS 2.4%

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2016-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:websphere_application_server

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093
http://www-01.ibm.com/support/docview.wss?uid=swg21990056
http://www.securityfocus.com/bid/93013
http://www.securitytracker.com/id/1036838
http://www-01.ibm.com/support/docview.wss?uid=swg1PI67093

Check your stack JSON