CVE-2016-9736

🗓️ 08 Jun 2017 21:00:00Reported by ibmType

IBM WebSphere App Server allows remote attacker to obtain sensitive info

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator (CVE-2016-9736)	17 Jun 201822:28	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2016-9736 )	15 Jun 201822:48	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Enterprise Service Bus (CVE-2016-9736)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: There is a potential information disclosure in IBM WebSphere Application Server shipped with IBM PureApplication System using malformed SOAP requests on IBM WebSphere Application Server (CVE-2016-9736)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server vulnerability with malformed SOAP requests in IBM Content Collector for Email	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Monitoring shipped with IBM Cloud Orchestrator Enterprise	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring embedded WebSphere Application Server	17 Jun 201815:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM Websphere Application Server and IBM Java shipped with IBM Security Access Manager for Enterprise Single Sign-On	25 Jun 201805:54	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2016-9736)	17 Jun 201815:32	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Denial of Service and Information Disclosure that affect IBM WebSphere Application Server for Bluemix (CVE-2016-8919, CVE-2016-9736)	15 Jun 201807:06	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverMatch8.0

ibm websphere_application_serverMatch8.5

ibm websphere_application_serverMatch9.0

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "8.5.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/96076
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/119780
www-01	www.www-01.ibm.com/support/docview.wss

13 May 2026 00:24Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 35.3

EPSS0.00509

CWE-200