Yüksek CVSS 7.5

CVE-2016-3092: Icewall Identity Manager: hatalı girdi doğrulama

Yayın: 5 Temmuz 2016 01:59 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

The MultipartStream class in Apache Commons Fileupload before 1.3.2, as used in Apache Tomcat 7.x before 7.0.70, 8.x before 8.0.36, 8.5.x before 8.5.3, and 9.x before 9.0.0.M7 and other products, allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.

Özet bilgiler

Ürün: Hp Icewall Identity Manager
CVSS v3.1: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: %37,17 (yüzdelik 99)
CWE: CWE-20
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
hp-icewall-identity-manager	5.0	5.0	—
hp-icewall-sso-agent-option	10.0	10.0	—
apache-tomcat	9.0.0	9.0.0	—
apache-tomcat	9.0.0	9.0.0	—
apache-tomcat	9.0.0	9.0.0	—
apache-tomcat	9.0.0	9.0.0	—
apache-tomcat	8.0.0	8.0.0	—
apache-tomcat	8.0.0	8.0.0	—
apache-tomcat	8.0.0	8.0.0	—
apache-tomcat	8.0.0	8.0.0	—
apache-tomcat	8.0.1	8.0.1	—
apache-tomcat	8.0.3	8.0.3	—
apache-tomcat	8.0.5	8.0.5	—
apache-tomcat	8.0.8	8.0.8	—
apache-tomcat	8.0.11	8.0.11	—
apache-tomcat	8.0.12	8.0.12	—
apache-tomcat	8.0.14	8.0.14	—
apache-tomcat	8.0.15	8.0.15	—
apache-tomcat	8.0.17	8.0.17	—
apache-tomcat	8.0.18	8.0.18	—
apache-tomcat	8.0.20	8.0.20	—
apache-tomcat	8.0.21	8.0.21	—
apache-tomcat	8.0.22	8.0.22	—
apache-tomcat	8.0.23	8.0.23	—
apache-tomcat	8.0.24	8.0.24	—
apache-tomcat	8.0.26	8.0.26	—
apache-tomcat	8.0.27	8.0.27	—
apache-tomcat	8.0.28	8.0.28	—
apache-tomcat	8.0.29	8.0.29	—
apache-tomcat	8.0.30	8.0.30	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları