VULNERABILITY INTELLIGENCE

CVE-2016-3016

CVSS score4.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2017-02-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

Description

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.

Weakness classification

  • CWE-345: Insufficient Verification of Data Authenticity

Primary references