Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM749B6A6B6D38F5F07BF39330C93789453228E074FE9CD70890C9F69C2C3B6BBE
HistoryJun 16, 2018 - 9:39 p.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575, CVE-2016-0448)

2018-06-1621:39:32
www.ibm.com
14

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

JSON

Summary

IBM WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager (SKLM). Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Application Server January 2016 CPU (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575, CVE-2016-0448) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
IBM Security Key Lifecycle Manager (SKLM) v2.5 on distributed platforms | WebSphere Application Server v8.5.5
IBM Security Key Lifecycle Manager (SKLM) v2.6 on distributed platforms | WebSphere Application Server v8.5.5.7

Related

ibm 96
kaspersky 1
nessus 35
openvas 29
centos 4
oraclelinux 4
veracode 5
redhat 7
amazon 2
mageia 1
suse 6
debian 3
ubuntu 1
osv 1
aix 1
prion 1
ubuntucve 1
debiancve 1
ibm
ibm
Security Bulletin:A security vulnerability has been identified in WebSphere Application Server shipped with Tivoli Netcool Performance Manager (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575, CVE-2016-0448)
2018-06-17 15:17:31
Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition affect IBM WebSphere Application Server for Bluemix January 2016 CPU (CVE-2016-0475, CVE-2016-0466, CVE-2015-7575, CVE-2016-0448)
2018-06-15 07:05:04
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server affecting IBM Tivoli Storage Manager FastBack Reporting
2018-06-17 15:17:24
kaspersky
kaspersky
KLA10743 Multiple vulnerabilities in Oracle Java SE
2016-01-20 00:00:00
nessus
nessus
Oracle JRockit R28 < R28.3.9 Multiple Vulnerabilities (January 2016 CPU) (SLOTH)
2016-01-21 00:00:00
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2016-647) (SLOTH)
2016-02-10 00:00:00
Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20160120) (SLOTH)
2016-01-22 00:00:00
openvas
openvas
CentOS Update for java CESA-2016:0050 centos6
2016-01-22 00:00:00
RedHat Update for java-1.8.0-openjdk RHSA-2016:0050-01
2016-01-21 00:00:00
RedHat Update for java-1.8.0-openjdk RHSA-2016:0049-01
2016-01-21 00:00:00
centos
centos
java security update
2016-01-21 19:37:41
java security update
2016-01-21 17:19:22
java security update
2016-01-21 17:21:45
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2016-01-20 00:00:00
java-1.8.0-openjdk security update
2016-01-20 00:00:00
java-1.7.0-openjdk security update
2016-01-21 00:00:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-02 05:20:30
Sandbox Restrictions Bypass
2019-05-02 05:20:30
Sandbox Restrictions Bypass
2019-05-02 05:20:30
redhat
redhat
(RHSA-2016:0050) Important: java-1.8.0-openjdk security update
2016-01-20 00:00:00
(RHSA-2016:0049) Critical: java-1.8.0-openjdk security update
2016-01-20 18:56:54
(RHSA-2016:0055) Critical: java-1.8.0-oracle security update
2016-01-21 11:14:37
amazon
amazon
Important: java-1.8.0-openjdk
2016-02-09 13:30:00
Important: java-1.7.0-openjdk
2016-02-09 13:30:00
mageia
mageia
Updated java-1.8.0-openjdk/copy-jdk-configs/lua-lunit/lua-posix packages fix security vulnerability
2016-02-05 20:26:09
suse
suse
Security update for java-1_8_0-openjdk (critical)
2016-01-27 15:13:41
Security update for java-1_8_0-ibm (important)
2016-02-09 14:11:58
Security update for java-1_8_0-openjdk (critical)
2016-01-27 21:11:29
debian
debian
[SECURITY] [DSA 3458-1] openjdk-7 security update
2016-01-27 21:00:48
[SECURITY] [DSA 3465-1] openjdk-6 security update
2016-02-02 21:31:52
[SECURITY] [DLA 410-1] openjdk-6 security update
2016-02-04 14:03:48
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2016-02-01 00:00:00
osv
osv
openjdk-6 - security update
2016-02-04 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2016-02-25 08:44:57
prion
prion
Design/Logic Flaw
2016-01-21 03:00:00
ubuntucve
ubuntucve
CVE-2016-0475
2016-01-21 00:00:00
debiancve
debiancve
CVE-2016-0475
2016-01-21 03:00:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

JSON
Related for 749B6A6B6D38F5F07BF39330C93789453228E074FE9CD70890C9F69C2C3B6BBE
ibm96kaspersky1nessus35openvas29centos4oraclelinux4veracode5redhat7amazon2mageia1suse6debian3ubuntu1osv1aix1prion1ubuntucve1debiancve1