cbcvebase.
CVE-2016-0396
published 2017-02-01

CVE-2016-0396: IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than…

PriorityP342high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
1.21%
64.5th percentile
IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher privileges than expected.

Affected

8 ranges
VendorProductVersion rangeFixed in
ibmbigfix_platform——
ibmbigfix_platform——
ibmbigfix_platform——
ibmbigfix_platform——
ibm_corporationbigfix_platform——
ibm_corporationbigfix_platform——
ibm_corporationbigfix_platform——
ibm_corporationbigfix_platform——

CVSS provenance

nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.