CVE-2016-9693
Severity Score
6.1
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can be bypassed so that the payload might be considered executable and cause damage on the victim's machine. IBM Reference #: 1998655.
IBM Business Process Manager 7.5, 8.0 y 8.5 tiene una capacidad de descarga de archivos vulnerable a un conjunto de ataques. Por último, un atacante puede provocar que una víctima no autenticada se descargue una carga útil maliciosa. Una restricción de tipo de archivo existente puede eludirse para que la carga útil pueda considerarse ejecutable y provocar daños en la máquina de la víctima. Referencia de IBM #: 1998655.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-12-01 CVE Reserved
- 2017-03-07 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/98074 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.ibm.com/support/docview.wss?uid=swg21998655 | 2017-05-02 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.1" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.1" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.0.1" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.1" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.1" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.1" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.2" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.2" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 7.5.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "7.5.1.2" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.0.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.0.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.0.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.1" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.1" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.1" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.2" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.2" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.2" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.3 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.3 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.3" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.3 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.3" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.0.1.3 Search vendor "Ibm" for product "Business Process Manager" and version "8.0.1.3" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.1" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.1" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.1 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.1" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.2" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.2" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.0.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.0.2" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.5.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.5.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.5.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.5.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.5.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.5.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.5.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.5.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.2" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.2" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.6.2 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.6.2" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.7.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.7.0" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.7.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.7.0" | advanced |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.7.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.7.0" | express |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Business Process Manager Search vendor "Ibm" for product "Business Process Manager" | 8.5.7.0 Search vendor "Ibm" for product "Business Process Manager" and version "8.5.7.0" | standard |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2 Search vendor "Ibm" for product "Websphere" and version "7.2" | lombardi |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2.0.1 Search vendor "Ibm" for product "Websphere" and version "7.2.0.1" | lombardi |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2.0.2 Search vendor "Ibm" for product "Websphere" and version "7.2.0.2" | lombardi |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2.0.3 Search vendor "Ibm" for product "Websphere" and version "7.2.0.3" | lombardi |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2.0.4 Search vendor "Ibm" for product "Websphere" and version "7.2.0.4" | lombardi |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Websphere Search vendor "Ibm" for product "Websphere" | 7.2.0.5 Search vendor "Ibm" for product "Websphere" and version "7.2.0.5" | lombardi |
Affected
| ||||||