CVE-2014-0964

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-16 · updated 2026-06-17
Weakness: CWE-399

Description

IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.

Affected products

IBM WebSphere Application Server: 6.1.0.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.5, 6.1.0.7 (+52)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PI14306
http://www-01.ibm.com/support/docview.wss?uid=swg1PI16981
http://www-01.ibm.com/support/docview.wss?uid=swg1PI17128
http://www-01.ibm.com/support/docview.wss?uid=swg21671835
http://www-304.ibm.com/support/docview.wss?uid=swg21673808
http://www.securitytracker.com/id/1030280
https://exchange.xforce.ibmcloud.com/vulnerabilities/92877
http://www-01.ibm.com/support/docview.wss?uid=swg1PI14306
http://www-01.ibm.com/support/docview.wss?uid=swg1PI16981
http://www-01.ibm.com/support/docview.wss?uid=swg1PI17128
http://www-01.ibm.com/support/docview.wss?uid=swg21671835
http://www-304.ibm.com/support/docview.wss?uid=swg21673808

Get alerted when CVE-2014-0964 or the next vulnerability affects your stack