CVE-2016-8986

MEDIUM

IBM WebSphere MQ 8.0 - Authenticated Denial of Service via HTTP Request

Title source: llm
STIX 2.1

Description

IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference #: 1998648.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/96412
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21998648

Scores

CVSS v3 6.5
EPSS 0.0020
EPSS Percentile 42.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-284
Status published
Products (8)
ibm/websphere_mq 8.0
ibm/websphere_mq 8.0.0.0
ibm/websphere_mq 8.0.0.1
ibm/websphere_mq 8.0.0.2
ibm/websphere_mq 8.0.0.3
ibm/websphere_mq 8.0.0.4
ibm/websphere_mq 8.0.0.5
IBM Corporation/WebSphere MQ 8.0
Published Feb 22, 2017
Tracked Since Feb 18, 2026