CVE-2016-2914

—

CVSS 3.0

5.4 medium

EPSS

1%p68

Published

Aug 8, 2016 (Aug 8, 2016)

Modified

Jun 17, 2026

Description

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.

Vendors: ibm
Products: engineering lifecycle optimization - publishing
Weakness: CWE-434
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.