CVE-2016-6112

HIGH

IBM Distributed Marketing and Marketing Platform <10.0 - Privilege ...

Title source: llm
STIX 2.1

Description

IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21992739

Scores

CVSS v3 8.8
EPSS 0.0035
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (14)
ibm/distributed_marketing 8.6.0.0
ibm/distributed_marketing 9.0.0.0
ibm/distributed_marketing 9.1.0.0
ibm/distributed_marketing 10.0.0.0
ibm/marketing_operations 8.6.0.0
ibm/marketing_operations 9.0.0.0
ibm/marketing_operations 9.1.0.0
ibm/marketing_operations 10.0.0.0
ibm/marketing_platform 8.6.0.0
ibm/marketing_platform 9.0.0.0
... and 4 more
Published May 22, 2017
Tracked Since Feb 18, 2026