vulnerability

IBM WebSphere Application Server: CVE-2016-5986: Potential Information Disclosure vulnerability in WebSphere Application Server (CVE-2016-5986)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Sep 30, 2016
Added
Apr 27, 2018
Modified
Aug 11, 2025

Description

IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.

Solutions

ibm-was-install-7-0-0-0-pi67093ibm-was-install-8-0-0-0-pi67093ibm-was-install-8-5-0-0-pi67093ibm-was-install-8-5-pi67093-libertyibm-was-install-9-0-0-0-pi67093ibm-was-upgrade-7-0-0-0-7-0-0-43ibm-was-upgrade-8-0-0-0-8-0-0-13ibm-was-upgrade-8-5-0-0-8-5-5-11ibm-was-upgrade-8-5-16-0-0-3-libertyibm-was-upgrade-9-0-0-0-9-0-0-2
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.