4.3

CVE-2015-2017

EPSS 1.88%
Veröffentlicht 08.11.2015 22:59:09
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.12, and 8.5 before 8.5.5.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

NVD 84 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server Version 6.1

Ibm ≫ Websphere Application Server Version 6.1.0

Ibm ≫ Websphere Application Server Version 6.1.0.0

Ibm ≫ Websphere Application Server Version 6.1.0.1

Ibm ≫ Websphere Application Server Version 6.1.0.2

Ibm ≫ Websphere Application Server Version 6.1.0.3

Ibm ≫ Websphere Application Server Version 6.1.0.5

Ibm ≫ Websphere Application Server Version 6.1.0.7

Ibm ≫ Websphere Application Server Version 6.1.0.9

Ibm ≫ Websphere Application Server Version 6.1.0.11

Ibm ≫ Websphere Application Server Version 6.1.0.12

Ibm ≫ Websphere Application Server Version 6.1.0.13

Ibm ≫ Websphere Application Server Version 6.1.0.14

Ibm ≫ Websphere Application Server Version 6.1.0.15

Ibm ≫ Websphere Application Server Version 6.1.0.17

Ibm ≫ Websphere Application Server Version 6.1.0.19

Ibm ≫ Websphere Application Server Version 6.1.0.21

Ibm ≫ Websphere Application Server Version 6.1.0.23

Ibm ≫ Websphere Application Server Version 6.1.0.25

Ibm ≫ Websphere Application Server Version 6.1.0.27

Ibm ≫ Websphere Application Server Version 6.1.0.29

Ibm ≫ Websphere Application Server Version 6.1.0.31

Ibm ≫ Websphere Application Server Version 6.1.0.33

Ibm ≫ Websphere Application Server Version 6.1.0.35

Ibm ≫ Websphere Application Server Version 6.1.0.37

Ibm ≫ Websphere Application Server Version 6.1.0.39

Ibm ≫ Websphere Application Server Version 6.1.0.41

Ibm ≫ Websphere Application Server Version 6.1.0.43

Ibm ≫ Websphere Application Server Version 6.1.0.45

Ibm ≫ Websphere Application Server Version 6.1.0.47

Ibm ≫ Websphere Application Server Version 7.0

Ibm ≫ Websphere Application Server Version 7.0.0.1

Ibm ≫ Websphere Application Server Version 7.0.0.2

Ibm ≫ Websphere Application Server Version 7.0.0.3

Ibm ≫ Websphere Application Server Version 7.0.0.4

Ibm ≫ Websphere Application Server Version 7.0.0.5

Ibm ≫ Websphere Application Server Version 7.0.0.6

Ibm ≫ Websphere Application Server Version 7.0.0.7

Ibm ≫ Websphere Application Server Version 7.0.0.8

Ibm ≫ Websphere Application Server Version 7.0.0.9

Ibm ≫ Websphere Application Server Version 7.0.0.10

Ibm ≫ Websphere Application Server Version 7.0.0.11

Ibm ≫ Websphere Application Server Version 7.0.0.12

Ibm ≫ Websphere Application Server Version 7.0.0.13

Ibm ≫ Websphere Application Server Version 7.0.0.14

Ibm ≫ Websphere Application Server Version 7.0.0.15

Ibm ≫ Websphere Application Server Version 7.0.0.16

Ibm ≫ Websphere Application Server Version 7.0.0.17

Ibm ≫ Websphere Application Server Version 7.0.0.18

Ibm ≫ Websphere Application Server Version 7.0.0.19

Ibm ≫ Websphere Application Server Version 7.0.0.21

Ibm ≫ Websphere Application Server Version 7.0.0.22

Ibm ≫ Websphere Application Server Version 7.0.0.23

Ibm ≫ Websphere Application Server Version 7.0.0.24

Ibm ≫ Websphere Application Server Version 7.0.0.25

Ibm ≫ Websphere Application Server Version 7.0.0.27

Ibm ≫ Websphere Application Server Version 7.0.0.29

Ibm ≫ Websphere Application Server Version 7.0.0.31

Ibm ≫ Websphere Application Server Version 7.0.0.32

Ibm ≫ Websphere Application Server Version 7.0.0.33

Ibm ≫ Websphere Application Server Version 7.0.0.34

Ibm ≫ Websphere Application Server Version 7.0.0.36

Ibm ≫ Websphere Application Server Version 7.0.0.37

Ibm ≫ Websphere Application Server Version 7.0.0.38

Ibm ≫ Websphere Application Server Version 8.0.0.0

Ibm ≫ Websphere Application Server Version 8.0.0.1

Ibm ≫ Websphere Application Server Version 8.0.0.2

Ibm ≫ Websphere Application Server Version 8.0.0.3

Ibm ≫ Websphere Application Server Version 8.0.0.4

Ibm ≫ Websphere Application Server Version 8.0.0.5

Ibm ≫ Websphere Application Server Version 8.0.0.6

Ibm ≫ Websphere Application Server Version 8.0.0.7

Ibm ≫ Websphere Application Server Version 8.0.0.8

Ibm ≫ Websphere Application Server Version 8.0.0.9

Ibm ≫ Websphere Application Server Version 8.0.0.10

Ibm ≫ Websphere Application Server Version 8.0.0.11

Ibm ≫ Websphere Application Server Version 8.5.5.0

Ibm ≫ Websphere Application Server Version 8.5.5.1

Ibm ≫ Websphere Application Server Version 8.5.5.2

Ibm ≫ Websphere Application Server Version 8.5.5.3

Ibm ≫ Websphere Application Server Version 8.5.5.4

Ibm ≫ Websphere Application Server Version 8.5.5.5

Ibm ≫ Websphere Application Server Version 8.5.5.6

Ibm ≫ Websphere Application Server Version 8.5.5.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.88%	0.767

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www-01.ibm.com/support/docview.wss?uid=swg1PI45266

Vendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21966837

Vendor Advisory

http://www.securityfocus.com/bid/78457

http://www.securitytracker.com/id/1034096

https://nvd.nist.gov/vuln/detail/CVE-2015-2017

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-2017

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-2017

EUVD