CVE Feed

    Dashboard / CVE / CVE-2016-5990

    CVE-2016-5990

    IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.

    Published:Feb 1, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 1, 2017
    EPSS Score:0.00193
    CVSS Score:6.3

    Affected Products

    Vendor
    Ibm
    Product
    Security Privileged Identity Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2018-1680 (CVSS 5.9) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have stron…
    CVE-2018-1640 (CVSS 8.8) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker t…
    CVE-2018-1626 (CVSS 3.1) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a suc…
    CVE-2018-1625 (CVSS 4.3) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sens…
    CVE-2018-1623 (CVSS 4) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which c…
    CVE-2018-1622 (CVSS 4.3) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery w…
    CVE-2018-1618 (CVSS 7.7) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse dir…
    CVE-2017-1705 (CVSS 4.3) — IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. Whi…
    CVE-2016-0366 (CVSS 3.7) — IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attacke…
    CVE-2017-1407 (CVSS 8.8) — IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to exe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High