Medium severity6.8NVD Advisory· Published Sep 26, 2016· Updated Jun 17, 2026

CVE-2016-3040

Description

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Privileged Identity Manager
cpe:2.3:a:ibm:security_privileged_identity_manager_virtual_appliance:2.0:*:*:*:*:*:*:*
IBM/Security Identity Manager Virtual Appliancellm-fuzzy
Range: < 2.0.2 FP8
IBM/WebSphere Application Server Liberty Profilellm-fuzzy
Range: < 2.0.2 FP8

Patches

Vulnerability mechanics

References

www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/92986nvd

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000