Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0964
HistoryMay 16, 2014 - 11:12 a.m.

CVE-2014-0964

2014-05-1611:12:00
CWE-399
[email protected]
web.nvd.nist.gov
5

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.9

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON

IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.

Affected configurations

Nvd
Node
ibmwebsphere_application_serverMatch6.1.0.0
OR
ibmwebsphere_application_serverMatch6.1.0.1
OR
ibmwebsphere_application_serverMatch6.1.0.2
OR
ibmwebsphere_application_serverMatch6.1.0.3
OR
ibmwebsphere_application_serverMatch6.1.0.5
OR
ibmwebsphere_application_serverMatch6.1.0.7
OR
ibmwebsphere_application_serverMatch6.1.0.9
OR
ibmwebsphere_application_serverMatch6.1.0.11
OR
ibmwebsphere_application_serverMatch6.1.0.12
OR
ibmwebsphere_application_serverMatch6.1.0.13
OR
ibmwebsphere_application_serverMatch6.1.0.14
OR
ibmwebsphere_application_serverMatch6.1.0.15
OR
ibmwebsphere_application_serverMatch6.1.0.17
OR
ibmwebsphere_application_serverMatch6.1.0.19
OR
ibmwebsphere_application_serverMatch6.1.0.21
OR
ibmwebsphere_application_serverMatch6.1.0.23
OR
ibmwebsphere_application_serverMatch6.1.0.25
OR
ibmwebsphere_application_serverMatch6.1.0.27
OR
ibmwebsphere_application_serverMatch6.1.0.29
OR
ibmwebsphere_application_serverMatch6.1.0.31
OR
ibmwebsphere_application_serverMatch6.1.0.33
OR
ibmwebsphere_application_serverMatch6.1.0.35
OR
ibmwebsphere_application_serverMatch6.1.0.37
OR
ibmwebsphere_application_serverMatch6.1.0.39
OR
ibmwebsphere_application_serverMatch6.1.0.41
OR
ibmwebsphere_application_serverMatch6.1.0.43
OR
ibmwebsphere_application_serverMatch6.1.0.45
OR
ibmwebsphere_application_serverMatch6.1.0.47
Node
ibmwebsphere_application_serverMatch6.0.2
OR
ibmwebsphere_application_serverMatch6.0.2.1
OR
ibmwebsphere_application_serverMatch6.0.2.2
OR
ibmwebsphere_application_serverMatch6.0.2.3
OR
ibmwebsphere_application_serverMatch6.0.2.4
OR
ibmwebsphere_application_serverMatch6.0.2.5
OR
ibmwebsphere_application_serverMatch6.0.2.6
OR
ibmwebsphere_application_serverMatch6.0.2.7
OR
ibmwebsphere_application_serverMatch6.0.2.9
OR
ibmwebsphere_application_serverMatch6.0.2.11
OR
ibmwebsphere_application_serverMatch6.0.2.13
OR
ibmwebsphere_application_serverMatch6.0.2.15
OR
ibmwebsphere_application_serverMatch6.0.2.17
OR
ibmwebsphere_application_serverMatch6.0.2.19
OR
ibmwebsphere_application_serverMatch6.0.2.22
OR
ibmwebsphere_application_serverMatch6.0.2.23
OR
ibmwebsphere_application_serverMatch6.0.2.24
OR
ibmwebsphere_application_serverMatch6.0.2.25
OR
ibmwebsphere_application_serverMatch6.0.2.27
OR
ibmwebsphere_application_serverMatch6.0.2.28
OR
ibmwebsphere_application_serverMatch6.0.2.29
OR
ibmwebsphere_application_serverMatch6.0.2.30
OR
ibmwebsphere_application_serverMatch6.0.2.31
OR
ibmwebsphere_application_serverMatch6.0.2.32
OR
ibmwebsphere_application_serverMatch6.0.2.33
OR
ibmwebsphere_application_serverMatch6.0.2.35
OR
ibmwebsphere_application_serverMatch6.0.2.37
OR
ibmwebsphere_application_serverMatch6.0.2.39
OR
ibmwebsphere_application_serverMatch6.0.2.41
OR
ibmwebsphere_application_serverMatch6.0.2.43
VendorProductVersionCPE
ibmwebsphere_application_server6.1.0.0cpe:2.3:a:ibm:websphere_application_server:6.1.0.0:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.1cpe:2.3:a:ibm:websphere_application_server:6.1.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.2cpe:2.3:a:ibm:websphere_application_server:6.1.0.2:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.3cpe:2.3:a:ibm:websphere_application_server:6.1.0.3:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.5cpe:2.3:a:ibm:websphere_application_server:6.1.0.5:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.7cpe:2.3:a:ibm:websphere_application_server:6.1.0.7:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.9cpe:2.3:a:ibm:websphere_application_server:6.1.0.9:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.11cpe:2.3:a:ibm:websphere_application_server:6.1.0.11:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.12cpe:2.3:a:ibm:websphere_application_server:6.1.0.12:*:*:*:*:*:*:*
ibmwebsphere_application_server6.1.0.13cpe:2.3:a:ibm:websphere_application_server:6.1.0.13:*:*:*:*:*:*:*
Rows per page:
1-10 of 581

Related

prion 1
cve 2
attackerkb 1
ibm 19
cvelist 2
openvas 12
redhat 4
nessus 41
zdt 4
ics 5
packetstorm 7
seebug 20
cloudfoundry 1
debian 4
checkpoint_advisories 1
securityvulns 34
veracode 2
metasploit 2
cisa_kev 1
mageia 1
exploitpack 2
arista 1
huawei 1
hackerone 4
cert 1
myhack58 1
threatpost 3
cisco 2
debiancve 1
qt 1
centos 1
kitploit 2
oraclelinux 1
vulnerlab 2
freebsd 1
atlassian 2
thn 3
malwarebytes 1
f5 1
suse 1
checkpoint_security 1
hp 1
ubuntucve 1
prion
prion
Code injection
2014-05-16 11:12:00
cve
cve
CVE-2014-0964
2014-05-16 11:12:00
CVE-2014-0160
2014-04-07 22:55:03
attackerkb
attackerkb
CVE-2014-0964
2014-05-16 00:00:00
ibm
ibm
Security Bulletin: Denial of Service with WebSphere Application Server and Scanning Tool (CVE-2014-0964)
2018-06-15 07:00:07
Security Bulletin: Tivoli Netcool Service Quality Manager is affected by the WebSphere Application Server vulnerability (CVE-2014-0964)
2018-06-17 14:47:06
Security Bulletin: Denial of Service with WebSphere Application Server affecting Rational Application Developer (CVE-2014-0964)
2020-02-05 00:09:48
cvelist
cvelist
CVE-2014-0964
2014-05-16 10:00:00
CVE-2014-0160
2014-04-07 00:00:00
openvas
openvas
IBM Websphere Application Server Denial Of Service Vulnerability 01 (Jan 2016)
2016-01-19 00:00:00
CentOS Update for openssl CESA-2014:0376 centos6
2014-04-08 00:00:00
OpenSSL Buffer Overflow Vulnerability (20140407, Heartbleed) - Linux
2021-07-19 00:00:00
redhat
redhat
(RHSA-2014:0378) Important: rhev-hypervisor6 security update
2014-04-08 00:00:00
(RHSA-2014:0377) Important: openssl security update
2014-04-08 00:00:00
(RHSA-2014:0376) Important: openssl security update
2014-04-08 00:00:00
nessus
nessus
BlackBerry Enterprise Service Information Disclosure (KB35882) (Heartbleed)
2014-04-29 00:00:00
Attachmate Reflection Secure IT Windows Client Information Disclosure (Heartbleed)
2014-05-12 00:00:00
Junos Pulse Secure Access IVE / UAC OS OpenSSL Heartbeat Information Disclosure (JSA10623) (Heartbleed)
2014-04-18 00:00:00
zdt
zdt
Heartbleed User Session Extraction Exploit
2014-04-09 00:00:00
Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support
2014-04-24 00:00:00
OpenSSL TLS Heartbeat Extension - Memory Disclosure
2014-04-08 00:00:00
ics
ics
Innominate mGuard OpenSSL HeartBleed Vulnerability (Update A)
2018-09-06 12:00:00
Digi International OpenSSL Vulnerability
2018-09-06 12:00:00
Siemens Industrial Products OpenSSL Heartbleed Vulnerability (Update B)
2018-09-06 12:00:00
packetstorm
packetstorm
Mass Bleed 20140423
2014-04-23 00:00:00
TLS Heartbeat Proof Of Concept
2014-04-09 00:00:00
Heartbleed User Session Extraction
2014-04-09 00:00:00
seebug
seebug
Heartbleed OpenSSL - Information Leak Exploit (2) - DTLS Support
2014-07-01 00:00:00
F-Secure E-mail/Server Security OpenSSL TLS/DTLS心跳信息泄漏漏洞
2014-04-16 00:00:00
IBM XIV Storage System OpenSSL TLS/DTLS心跳信息泄漏漏洞
2014-04-16 00:00:00
cloudfoundry
cloudfoundry
CVE-2014-0160 Heartbleed | Cloud Foundry
2014-04-10 00:00:00
debian
debian
[SECURITY] [DSA 2896-1] openssl security update
2014-04-07 21:36:46
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
[SECURITY] [DSA 2896-2] openssl security update
2014-04-08 13:47:13
checkpoint_advisories
checkpoint_advisories
OpenSSL TLS Heartbeat information disclosure - Ver2 (CVE-2014-0160)
2014-12-28 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBMU03017 rev.2 - HP Software Connect-IT running OpenSSL, Remote Disclosure of Information
2014-05-01 00:00:00
[security bulletin] HPSBMU03020 rev.2 - HP Version Control Agent (VCA) and Version Control Repository Manager (VCRM) running OpenSSL on Linux and Windows, Remote Disclosure of Information
2014-05-01 00:00:00
[security bulletin] HPSBGN03008 rev.1 - HP Software Service Manager, "HeartBleed" OpenSSL Vulnerability, Remote Disclosure of Information
2014-04-20 00:00:00
veracode
veracode
Information Disclosure Through Buffer Over-read
2017-02-07 02:53:18
Information Disclosure Through Buffer Over-read
2019-01-15 09:00:11
metasploit
metasploit
OpenSSL Heartbeat (Heartbleed) Information Leak
2014-06-28 21:06:46
OpenSSL Heartbeat (Heartbleed) Client Memory Exposure
2014-04-09 14:38:11
cisa_kev
cisa_kev
OpenSSL Information Disclosure Vulnerability
2022-05-04 00:00:00
mageia
mageia
Updated tor packages fix multiple vulnerabilities
2014-06-06 18:33:56
exploitpack
exploitpack
OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (1)
2014-04-10 00:00:00
OpenSSL 1.0.1f TLS Heartbeat Extension - Heartbleed Memory Disclosure (Multiple SSLTLS Versions)
2014-04-09 00:00:00
arista
arista
Security Advisory 0004
2014-04-09 00:00:00
huawei
huawei
Security Advisory-OpenSSL Heartbeat Extension vulnerability (Heartbleed bug) on Huawei multiple products
2014-04-17 00:00:00
hackerone
hackerone
Concrete CMS: https://concrete5.org ::: HeartBleed Attack (CVE-2014-0160)
2014-04-08 11:01:31
Mail.ru: scfbp.tng.mail.ru: Heartbleed
2015-02-25 07:49:11
Internet Bug Bounty: TLS heartbeat read overrun
2014-04-05 23:51:06
cert
cert
OpenSSL TLS heartbeat extension read overflow discloses sensitive information
2014-04-08 00:00:00
myhack58
myhack58
Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net
2014-04-10 00:00:00
threatpost
threatpost
Tor Blacklisting Exit Nodes Vulnerable to Heartbleed Bug
2014-04-17 11:40:41
April 2014 Oracle Critical Patch Update
2014-04-16 12:32:06
Oracle Gives Heartbleed Update, Patches 14 Products
2014-04-21 13:55:42
cisco
cisco
OpenSSL Heartbeat Extension Vulnerability in Multiple Cisco Products
2014-04-09 03:00:00
OpenSSL TLS/DTLS Heartbeat Information Disclosure Vulnerability
2014-04-08 14:39:29
debiancve
debiancve
CVE-2014-0160
2014-04-07 22:55:03
qt
qt
Heartbleed Bug (CVE-2014-0160) and Qt
2014-04-10 00:00:00
centos
centos
openssl security update
2014-04-08 02:54:58
kitploit
kitploit
Heartbleed Vulnerability Scanner - Network Scanner for OpenSSL Memory Leak (CVE-2014-0160)
2015-10-01 09:47:00
sslscan - tests SSL/TLS enabled services to discover supported cipher suites
2016-12-26 14:30:00
oraclelinux
oraclelinux
openssl security update
2014-04-07 00:00:00
vulnerlab
vulnerlab
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
HeartBleed SSL CVE 20140160 - 10 Steps to Fix in Ubuntu
2014-04-09 00:00:00
freebsd
freebsd
OpenSSL -- Remote Information Disclosure
2014-04-07 00:00:00
atlassian
atlassian
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
Update Tomcat Native DLL in JIRA Installer
2014-06-26 19:39:26
thn
thn
How Heartbleed Bug Exposes Your Passwords to Hackers
2014-04-10 07:00:00
Billions of Smartphone Users affected by Heartbleed Vulnerability
2014-04-13 08:19:00
NSA denies Report that Agency knew and exploited Heartbleed Vulnerability
2014-04-11 23:21:00
malwarebytes
malwarebytes
Five years later, Heartbleed vulnerability still unpatched
2019-09-12 15:00:00
f5
f5
SOL15159 - OpenSSL vulnerability CVE-2014-0160
2014-04-08 00:00:00
suse
suse
update for openssl (important)
2014-04-08 13:04:15
checkpoint_security
checkpoint_security
Check Point response to OpenSSL vulnerability (CVE-2014-0160)
2014-04-07 21:00:00
hp
hp
HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of Information
2014-04-23 00:00:00
ubuntucve
ubuntucve
CVE-2014-0160
2014-04-07 00:00:00

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.9

Confidence

High

EPSS

0.974

Percentile

99.9%

JSON
Related for NVD:CVE-2014-0964
prion1cve2attackerkb1ibm19cvelist2openvas12redhat4nessus41zdt4ics5packetstorm7seebug20cloudfoundry1debian4checkpoint_advisories1securityvulns34veracode2metasploit2cisa_kev1mageia1exploitpack2arista1huawei1hackerone4cert1myhack581threatpost3cisco2debiancve1qt1centos1kitploit2oraclelinux1vulnerlab2freebsd1atlassian2thn3malwarebytes1f51suse1checkpoint_security1hp1ubuntucve1