CVE-2016-0400

Published: Jul 2, 2016Modified: May 6, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

Affected (14)

Products: Ibm: Websphere Extreme Scale

Ibm

1 product

Websphere Extreme Scale

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Extreme Scale	Version 7.1.0.2
Ibm Websphere Extreme Scale	Version 7.1.0
Ibm Websphere Extreme Scale	Version 7.1.1
Ibm Websphere Extreme Scale	Version 8.5.0.1
Ibm Websphere Extreme Scale	Version 8.5.0.2
Ibm Websphere Extreme Scale	Version 8.5.0
Ibm Websphere Extreme Scale	Version 8.6.0.0
Ibm Websphere Extreme Scale	Version 8.6.0.1
Ibm Websphere Extreme Scale	Version 8.6.0.2
Ibm Websphere Extreme Scale	Version 8.6.0.3
Ibm Websphere Extreme Scale	Version 8.6.0.4
Ibm Websphere Extreme Scale	Version 8.6.0.5
Ibm Websphere Extreme Scale	Version 8.6.0.6
Ibm Websphere Extreme Scale	Version 8.6.0.7