CVE-2016-2914
MEDIUMIBM Engineering Lifecycle Optimizatio... - Unrestricted File Upload
Title source: ruleDescription
Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.
Scores
CVSS v3
5.4
EPSS
0.0113
EPSS Percentile
78.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Classification
CWE
CWE-434
Status
draft
Affected Products (1)
ibm/engineering_lifecycle_optimization_-_publishing
Timeline
Published
Aug 08, 2016
Tracked Since
Feb 18, 2026