CVE-2016-5963: IBM Security Privileged Identity Manager Virtual Appliance

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected products

• IBM Security Privileged Identity Manager Virtual Appliance: version 2.0 only

Published 2016-09-26. Last modified 2026-06-17.