Back to CVE Browser

CVE-2016-5963

HIGH

8.8

CVSS Severity Score

EPSS Score0.1150%

EPSS Percentile30.07th

PublishedSep 26, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected Platforms (CPE)

📦

Ibm

Security Privileged Identity Manager Virtual Appliance

= 2.0

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21989205

🔗 http://www.securityfocus.com/bid/93076

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21989205

🔗 http://www.securityfocus.com/bid/93076

Related Vulnerabilities

CVE-2016-59649.8

IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could all...

CVE-2016-03248.8

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authentic...

CVE-2018-16408.8

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker to execute arbitrary ...

CVE-2016-03277.8

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to g...