CVE-2016-5954

MEDIUM

IBM WebSphere Portal <8.5.0 - DoS

Title source: llm

Description

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files.

References (4)

[Not Applicable] http://www-01.ibm.com/support/docview.wss?uid=swg1PI67037

[Patch, Vendor Advisory] http://www-01.ibm.com/support/docview.wss?uid=swg21989993

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1036762

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/93017

Scores

CVSS v3 6.5

EPSS 0.0062

EPSS Percentile 69.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-284

Status published

Affected Products (18)

ibm/websphere_portal

... and 3 more

Timeline

Published Sep 12, 2016

Tracked Since Feb 18, 2026