CVE-2016-5996: IBM Tealeaf Customer Experience

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The web portal in IBM Tealeaf Customer Experience before 8.7.1.8847 FP10, 8.8 before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108_9.0.1A FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224_9.0.2A FP3 does not enforce password-length restrictions, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected products

• IBM Tealeaf Customer Experience: up to and including 8.7; version 8.8 only; version 9.0.0 only; version 9.0.1 only; version 9.0.1a only; version 9.0.2 only; …

Published 2016-09-26. Last modified 2026-06-17.