CVE-2016-3017 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
ibm	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 48%

Vendor	Product	Version
ibm	security_access_manager_9.0_firmware	9.0.0
ibm	security_access_manager_9.0_firmware	9.0.0.1
ibm	security_access_manager_9.0_firmware	9.0.1.0
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.1
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.2
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.3
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.0.5
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.1.0
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.1.2
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.1.3
ibm	security_access_manager_for_mobile_8.0_firmware	8.0.1.4
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.1
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.2
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.3
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.4
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.5
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.6
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.7
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.8
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.9
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.10
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.11
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.12
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.13
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.14
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.15
ibm	security_access_manager_for_web_7.0_firmware	7.0.0.16
ibm	security_access_manager_for_web_8.0_firmware	8.0.0.1
ibm	security_access_manager_for_web_8.0_firmware	8.0.0.2
ibm	security_access_manager_for_web_8.0_firmware	8.0.0.3
ibm	security_access_manager_for_web_8.0_firmware	8.0.0.5
ibm	security_access_manager_for_web_8.0_firmware	8.0.1.0
ibm	security_access_manager_for_web_8.0_firmware	8.0.1.2
ibm	security_access_manager_for_web_8.0_firmware	8.0.1.3
ibm	security_access_manager_for_web_8.0_firmware	8.0.1.4

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-358 - Improperly Implemented Security Check for Standard
The software does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

References

http://www.ibm.com/support/docview.wss?uid=swg21995519