IBM Distributed Marketing vulnerabilities

2 CVEs affecting IBM Distributed Marketing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6112, published 2017-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6112, published 2017-05-22. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application.…
CVE-2016-5979, published 2017-05-15. Low severity, CVSS 2.7. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the…