CVE-2016-2996: IBM Security Privileged Identity Manager

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors.

Affected products

• IBM Security Privileged Identity Manager: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only

Published 2016-11-24. Last modified 2026-06-17.