VULNERABILITY INTELLIGENCE
CVE-2016-6077
CVSS score5.3 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2017-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Description
IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference #: 1991584.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- psirt@us.ibm.com — Patch, Vendor Advisory
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry