CVE-2016-3020

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Feb 7, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-30212.7IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specialCVE-2016-30226.5IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file pCVE-2016-30235.3IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file namCVE-2016-30244.0IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system.CVE-2016-30258.1IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict faCVE-2016-30276.5IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when procesCVE-2016-30289.1IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remotCVE-2016-30298.8IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unautCVE-2016-30315.4IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WCVE-2016-30325.4IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WCVE-2016-30338.1IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumCVE-2016-30344.4IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt i
CVE-2016-3020: Medium severity, CVSS 5.5 | Vulnix