CVE-2016-2957: IBM Connections

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response.

Affected products

• IBM Connections: version 4.0.0.0 only; version 4.5.0.0 only; version 5.0.0.0 only

Published 2016-11-30. Last modified 2026-06-17.