cvedb.io
CVE-2016-3040
MEDIUM · CVSS 6.8
EPSS exploitation probability: 0%
Published 2016-09-26T04:59:13.247 · Last modified 2026-06-17T00:44:51.823

Summary

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

ibm — security_privileged_identity_manager_virtual_appliance

Does this affect you?

Add your gear to cvedb and we'll alert you only when ibm ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.