CVE-2016-2999: IBM Connections

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack.

Affected products

• IBM Connections: up to and including 5.5.0.0

Published 2016-09-26. Last modified 2026-06-17.