CVE-2016-9749

CWE-20 — Improper Input Validation3 documents3 sources
Severity
3.3LOW
EPSS
0.0%
top 86.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Campaign
Timeline
PublishedNov 9
Latest updateMay 13

Description

IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an authenticated user with access to the local network to bypass security due to lack of input validation. IBM X-Force ID: 120206.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 2.5 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/campaign4 versions+3
▶NVDibm/campaign22 versions+21

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-gv6r-7r72-684h: IBM Campaign 9↗2022-05-13
▶
CVEList
CVE-2016-9749: IBM Campaign 9↗2018-11-09
▶
CVE-2016-9749 (LOW CVSS 3.3) | IBM Campaign 9.1.0 | cvebase.io