CVE-2016-5963

HIGH

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance ...

Title source: llm

Description

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21989205

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93076

Scores

CVSS v3 8.8

EPSS 0.0159

EPSS Percentile 72.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-284

Status published

Products (1)

ibm/security_privileged_identity_manager_virtual_appliance 2.0

Published Sep 26, 2016

Tracked Since Feb 18, 2026