4.4med
CVE-2016-3016
IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integr…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
4.4
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 29%
Public exploits
0
none known
Summary
IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.
Exploit prediction (EPSS)
0.35% probability of exploitation in the next 30 days, higher than 29% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.4 | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 3.5 | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Affected products
- IBM Corporation Access Manager
Classification
- Weakness
- CWE-345 Insufficient Verification of Data Authenticity
References
- ibm.com /support/docview.wss?uid=swg21995518 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-3016
- NVD: CVE-2016-3016
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.