Medium severity5.3NVD Advisory· Published Jul 2, 2016· Updated Jun 17, 2026
CVE-2016-2961
CVE-2016-2961
Description
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:ibm:integration_bus:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:10.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:10.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:10.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:10.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:integration_bus:9.0.0.5:*:*:*:*:*:*:*
- (no CPE)range: <9.0.0.6 for version 9, <10.0.0.5 for version 10
cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.7:*:*:*:*:*:*:*
- (no CPE)range: <8.0.0.8
Patches
Vulnerability mechanics
References
2- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvd
News mentions
0No linked articles in our index yet.