VULNERABILITY INTELLIGENCE

CVE-2016-5983

CVSS score7.5 HIGH
EPSS probability4.12%
CISA KEVNot currently listed
Published2016-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

Weakness classification

  • CWE-284: Improper Access Control

Primary references