CVE-2011-1316 — IBM Websphere Application Server vulnerability

CWE-3993 documents3 sources

Severity

5.0MEDIUMNVD

EPSS

0.5%

top 32.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedMar 8

Latest updateMay 17

Description

The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/websphere_application_server7.0.0.13+138

🔴Vulnerability Details

GHSA

GHSA-v9ff-pxp5-jj2v: The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7↗2022-05-17

▶

CVEList

CVE-2011-1316: The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7↗2011-03-08

▶