IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.

Recent assessments:

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

References

www-01.ibm.com/support/docview.wss?uid=swg1PI14306

www-01.ibm.com/support/docview.wss?uid=swg1PI16981

www-01.ibm.com/support/docview.wss?uid=swg1PI17128

www-01.ibm.com/support/docview.wss?uid=swg21671835

www-304.ibm.com/support/docview.wss?uid=swg21673808

www.securitytracker.com/id/1030280

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0964

exchange.xforce.ibmcloud.com/vulnerabilities/92877

prion 1

cve 2

nvd 1

ibm 19

cvelist 2

openvas 12

redhat 4

nessus 41

hackerone 4

cert 1

myhack58 1

packetstorm 7

seebug 20

threatpost 3

cisco 2

securityvulns 34

debiancve 1

qt 1

zdt 4

centos 1

kitploit 2

oraclelinux 1

vulnerlab 2

ics 5

cloudfoundry 1

debian 4

checkpoint_advisories 1

veracode 2

metasploit 2

cisa_kev 1

mageia 1

exploitpack 2

arista 1

huawei 1

freebsd 1

atlassian 2

thn 3

malwarebytes 1

f5 1

suse 1

checkpoint_security 1

hp 1

ubuntucve 1

prion

Code injection

2014-05-16 11:12:00

cve

CVE-2014-0964

2014-05-16 11:12:00

CVE-2014-0160

2014-04-07 22:55:03

nvd

CVE-2014-0964

2014-05-16 11:12:00

ibm

Security Bulletin: Denial of Service with WebSphere Application Server and Scanning Tool (CVE-2014-0964)

2018-06-15 07:00:07

Security Bulletin: Tivoli Netcool Service Quality Manager is affected by the WebSphere Application Server vulnerability (CVE-2014-0964)

2018-06-17 14:47:06

Security Bulletin: Denial of Service with WebSphere Application Server affecting Rational Application Developer (CVE-2014-0964)

2020-02-05 00:09:48

cvelist

CVE-2014-0964

2014-05-16 10:00:00

CVE-2014-0160

2014-04-07 00:00:00

openvas

IBM Websphere Application Server Denial Of Service Vulnerability 01 (Jan 2016)

2016-01-19 00:00:00

OpenSSL TLS 'heartbeat' Extension Information Disclosure Vulnerability (STARTTLS Check)

2014-04-09 00:00:00

Debian: Security Advisory (DSA-2896-1)

2014-04-06 00:00:00

redhat

(RHSA-2014:0376) Important: openssl security update

2014-04-08 00:00:00

(RHSA-2014:0378) Important: rhev-hypervisor6 security update

2014-04-08 00:00:00

(RHSA-2014:0377) Important: openssl security update

2014-04-08 00:00:00

nessus

McAfee Email Gateway OpenSSL Information Disclosure (SB10071) (Heartbleed)

2014-05-02 00:00:00

McAfee Next Generation Firewall OpenSSL Information Disclosure (SB10071) (Heartbleed)

2014-05-02 00:00:00

HP Version Control Repository Manager (VCRM) Heartbeat Information Disclosure (Heartbleed)

2014-08-06 00:00:00

hackerone

Concrete CMS: https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)

2014-04-08 11:01:31

Mail.ru: scfbp.tng.mail.ru: Heartbleed

2015-02-25 07:49:11

Internet Bug Bounty: TLS heartbeat read overrun

2014-04-05 23:51:06

cert

OpenSSL TLS heartbeat extension read overflow discloses sensitive information

2014-04-08 00:00:00

myhack58

Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net

2014-04-10 00:00:00

packetstorm

Heartbleed User Session Extraction

2014-04-09 00:00:00

Mass Bleed 20140423

2014-04-23 00:00:00

TLS Heartbeat Proof Of Concept

2014-04-09 00:00:00

seebug

McAfee Email Gateway OpenSSL TLS心跳信息泄漏漏洞

2014-04-16 00:00:00

HP多个产品OpenSSL TLS/DTLS心跳信息泄漏漏洞

2014-04-16 00:00:00

LibreOffice OpenSSL TLS心跳信息泄漏漏洞

2014-04-16 00:00:00

threatpost

Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug

2014-04-17 11:40:41

April 2014 Oracle Critical Patch Update

2014-04-16 12:32:06

Oracle Gives Heartbleed Update, Patches 14 Products

2014-04-21 13:55:42

cisco

OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products

2014-04-09 03:00:00

OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability

2014-04-08 14:39:29

securityvulns

[security bulletin] HPSBMU02994 rev.1 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Information

2014-04-20 00:00:00

[security bulletin] HPSBMU03028 rev.1 - HP Matrix Operating Environment and CloudSystem Matrix Software Components running OpenSSL, Remote Disclosure of Information

2014-05-02 00:00:00

[security bulletin] HPSBMU03019 rev.1 - HP Software UCMDB Browser and Configuration Manager running OpenSSL, Remote Disclosure of Information

2014-05-01 00:00:00

debiancve

CVE-2014-0160

2014-04-07 22:55:03

Heartbleed Bug (CVE-2014-0160) and Qt

2014-04-10 00:00:00

zdt

Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support

2014-04-24 00:00:00

Heartbleed User Session Extraction Exploit

2014-04-09 00:00:00

OpenSSL TLS Heartbeat Extension - Memory Disclosure

2014-04-08 00:00:00

centos

openssl security update

2014-04-08 02:54:58

kitploit

Heartbleed Vulnerability Scanner - Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)

2015-10-01 09:47:00

sslscan - tests SSL/TLS enabled services to discover supported cipher suites

2016-12-26 14:30:00

oraclelinux

openssl security update

2014-04-07 00:00:00

vulnerlab

HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu

2014-04-09 00:00:00

HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu

2014-04-09 00:00:00

ics

Innominate mGuard OpenSSL HeartBleed Vulnerability (Update A)

2018-09-06 12:00:00

Digi International OpenSSL Vulnerability

2018-09-06 12:00:00

Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)

2018-09-06 12:00:00

cloudfoundry

CVE-2014-0160 Heartbleed | Cloud Foundry

2014-04-10 00:00:00

debian

[SECURITY] [DSA 2896-1] openssl security update

2014-04-07 21:36:46

[SECURITY] [DSA 2896-2] openssl security update

2014-04-08 13:47:13

[SECURITY] [DSA 2896-2] openssl security update

2014-04-08 13:47:13

checkpoint_advisories

OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)

2014-12-28 00:00:00

veracode

Information Disclosure Through Buffer Over-read

2017-02-07 02:53:18

Information Disclosure Through Buffer Over-read

2019-01-15 09:00:11

metasploit

OpenSSL Heartbeat (Heartbleed) Information Leak

2014-06-28 21:06:46

OpenSSL Heartbeat (Heartbleed) Client Memory Exposure

2014-04-09 14:38:11

cisa_kev

OpenSSL Information Disclosure Vulnerability

2022-05-04 00:00:00

mageia

Updated tor packages fix multiple vulnerabilities

2014-06-06 18:33:56

exploitpack

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (1)

2014-04-10 00:00:00

OpenSSL 1.0.1f TLS Heartbeat Extension - Heartbleed Memory Disclosure (Multiple SSLTLS Versions)

2014-04-09 00:00:00

arista

Security Advisory 0004

2014-04-09 00:00:00

huawei

Security Advisory-OpenSSL Heartbeat Extension vulnerability (Heartbleed bug) on Huawei multiple products

2014-04-17 00:00:00

freebsd

OpenSSL -- Remote Information Disclosure

2014-04-07 00:00:00

atlassian

Update Tomcat Native DLL in JIRA Installer

2014-06-26 19:39:26

Update Tomcat Native DLL in JIRA Installer

2014-06-26 19:39:26

thn

How Heartbleed Bug Exposes Your Passwords to Hackers

2014-04-10 07:00:00

Billions of Smartphone Users affected by Heartbleed Vulnerability

2014-04-13 08:19:00

NSA denies Report that Agency knew and exploited Heartbleed Vulnerability

2014-04-11 23:21:00

malwarebytes

Five years later, Heartbleed vulnerability still unpatched

2019-09-12 15:00:00

SOL15159 - OpenSSL vulnerability CVE-2014-0160

2014-04-08 00:00:00

suse

update for openssl (important)

2014-04-08 13:04:15

checkpoint_security

Check Point response to OpenSSL vulnerability (CVE-2014-0160)

2014-04-07 21:00:00

HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of Information

2014-04-23 00:00:00

ubuntucve

CVE-2014-0160

2014-04-07 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.974

Percentile

99.9%

JSON

Related for AKB:6840D66E-0E62-484F-9172-6FC67F905258