VULNERABILITY INTELLIGENCE

CVE-2016-2914

CVSS score5.4 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2016-08-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Description

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references