Lucene search

[email protected]NVD:CVE-2016-2887

HistoryNov 30, 2016 - 8:59 p.m.

CVE-2016-2887

2016-11-3020:59:02

CWE-200

CWE-284

[email protected]

web.nvd.nist.gov

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

45.1%

JSON

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Affected configurations

Nvd

Node

ibmims_enterprise_suiteRange≤3.2.0.0

AND

microsoft.net_frameworkMatch-

VendorProductVersionCPE
ibmims_enterprise_suite*cpe:2.3:a:ibm:ims_enterprise_suite:*:*:*:*:*:*:*:*
microsoft.net_framework-cpe:2.3:a:microsoft:.net_framework:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	ims_enterprise_suite	*	cpe:2.3:a:ibm:ims_enterprise_suite::::::::
microsoft	.net_framework	-	cpe:2.3:a:microsoft:.net_framework:-:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg21982967

www.securityfocus.com/bid/94611

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

45.1%

JSON

Related for NVD:CVE-2016-2887

cve1 cvelist1 ibm1 prion1