CVE-2011-1316: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

The Session Initiation Protocol (SIP) Proxy in the HTTP Transport component in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (worker thread exhaustion and UDP messaging outage) by sending many UDP messages.

Affected products

• IBM WebSphere Application Server: up to and including 7.0.0.13; version 2.0 only; version 3.0 only; version 3.0.2 only; version 3.0.2.1 only; version 3.0.2.2 only; …

Published 2011-03-08. Last modified 2026-06-16.