High severity7.5NVD Advisory· Published Feb 1, 2017· Updated May 13, 2026

CVE-2016-8919

Description

IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.

Affected products

IBM/Websphere Application Server4 versions
cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:websphere_application_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*
IBM Corporation/WebSphere Application Serverv5
Range: 1.0.0.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/95650nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1037710nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000