CVE-2016-8977

—

CVSS 3.0

5.3 medium

EPSS

1%p64

Published

Feb 1, 2017 (Feb 1, 2017)

Modified

Jun 17, 2026

Description

IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests. This information could be used to mount further attacks against the system.

Vendors: ibm
Products: license metric tool, bigfix inventory
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.