CVE-2016-3012

—

CVSS 3.0

7.5 high

EPSS

2%p75

Published

Dec 1, 2016 (Dec 1, 2016)

Modified

Jun 17, 2026

Description

IBM API Connect (aka APIConnect) before 5.0.3.0 with NPM before 2.2.8 includes certain internal server credentials in the software package, which might allow remote attackers to bypass intended access restrictions by leveraging knowledge of these credentials.

Vendors: ibm
Products: api connect, network path manager
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.