CVE-2016-5996

7.5 highEPSS 1.4%

High (7.5) in ibm tealeaf customer experience. EPSS 1.4% chance of exploitation in the next 30 days.

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-640
Published: 2016-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tealeaf_customer_experience

References

http://www-01.ibm.com/support/docview.wss?uid=swg21990216
http://www.securityfocus.com/bid/93138
http://www-01.ibm.com/support/docview.wss?uid=swg21990216
http://www.securityfocus.com/bid/93138

Check your stack JSON