Critical severity9.1NVD Advisory· Published Nov 25, 2016· Updated Jun 17, 2026
CVE-2016-3028
CVE-2016-3028
Description
IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*
< 9.0 before 9.0.1.0 IF5+ 1 more
- (no CPE)range: < 9.0 before 9.0.1.0 IF5
- (no CPE)range: < 7.0 before IF2, < 8.0 before 8.0.1.4 IF3
Patches
Vulnerability mechanics
References
5- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www.securityfocus.com/bid/93176nvd
News mentions
0No linked articles in our index yet.