cve.bz

CVE-2016-2914

5.4 mediumEPSS 1.3%

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.

Severity

CVSS 3.0

5.4 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS
1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE
CWE-434
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON