Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-3040

Опубликовано: 26 сент. 2016
Источник: nvd
CVSS3: 6.8
CVSS2: 4.9
EPSS Низкий

Описание

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00113
Низкий

6.8 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.8
github
больше 3 лет назад

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

EPSS

Процентиль: 30%
0.00113
Низкий

6.8 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-601