CVE-2016-0239

HIGH

IBM Security Guardium Database Activity Monitor <10.0.1 - Privilege...

Title source: llm
STIX 2.1

Description

IBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0.1 before p100 allows remote authenticated users to make HTTP requests with administrator privileges via unspecified vectors.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21988999
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93827

Scores

CVSS v3 8.8
EPSS 0.0125
EPSS Percentile 66.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (5)
ibm/security_guardium_database_activity_monitor 9.0
ibm/security_guardium_database_activity_monitor 9.1
ibm/security_guardium_database_activity_monitor 9.5
ibm/security_guardium_database_activity_monitor 10.0
ibm/security_guardium_database_activity_monitor 10.0.1
Published Oct 22, 2016
Tracked Since Feb 18, 2026