Medium severity5.5NVD Advisory· Published Feb 7, 2017· Updated May 13, 2026
CVE-2016-3020
CVE-2016-3020
Description
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.
Affected products
5- cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*
- IBM Corporation/Access Managerv5Range: 9.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.