Servers and applications
CVE-2014-0964 IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via crafted TLS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool.
Severity High 7.1
Published 16 May 2014
Last changed 17 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 2.7% in the next 30 daysHigher than 86% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Take it down
CVSS vector AV:N/AC:M/Au:N/C:N/I:N/A:C
Sources NVD Affected software Software Affected versions IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server Version 6.1.0.47 Version 6.1.0.45 Version 6.1.0.43 Version 6.1.0.41 All 58 release lines Version 6.0.2 Version 6.0.2.1 Version 6.0.2.2 Version 6.0.2.3 Version 6.0.2.4 Version 6.0.2.5 Version 6.0.2.6 Version 6.0.2.7 Version 6.0.2.9 Version 6.0.2.11 Version 6.0.2.13 Version 6.0.2.15 Version 6.0.2.17 Version 6.0.2.19 Version 6.0.2.22 Version 6.0.2.23 Version 6.0.2.24 Version 6.0.2.25 Version 6.0.2.27 Version 6.0.2.28 Version 6.0.2.29 Version 6.0.2.30 Version 6.0.2.31 Version 6.0.2.32 Version 6.0.2.33 Version 6.0.2.35 Version 6.0.2.37 Version 6.0.2.39 Version 6.0.2.41 Version 6.0.2.43 Version 6.1.0.0 Version 6.1.0.1 Version 6.1.0.2 Version 6.1.0.3 Version 6.1.0.5 Version 6.1.0.7 Version 6.1.0.9 Version 6.1.0.11 Version 6.1.0.12 Version 6.1.0.13 Version 6.1.0.14 Version 6.1.0.15 Version 6.1.0.17 Version 6.1.0.19 Version 6.1.0.21 Version 6.1.0.23 Version 6.1.0.25 Version 6.1.0.27 Version 6.1.0.29 Version 6.1.0.31 Version 6.1.0.33 Version 6.1.0.35 Version 6.1.0.37 Version 6.1.0.39 Version 6.1.0.41 Version 6.1.0.43 Version 6.1.0.45 Version 6.1.0.47
References NVD https://nvd.nist.gov/vuln/detail/CVE-2014-0964 CVE.org https://www.cve.org/CVERecord?id=CVE-2014-0964