ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-3040

—
CVSS 3.0
6.8 medium
EPSS
1%p62
Published
()
Modified
Description

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Vendors
ibm
Products
security privileged identity manager virtual appliance
Weakness
CWE-601
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news

No ingested article mentions this CVE yet.