CVE-2016-5963

8.8 highEPSS 1.6%

High (8.8) in ibm security privileged identity manager virtual appliance. EPSS 1.6% chance of exploitation in the next 30 days.

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2016-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_privileged_identity_manager_virtual_appliance

References

http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93076
http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93076

Check your stack JSON