CVE-2016-2914

medium

Description

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension.

References

http://www.securityfocus.com/bid/92334

http://www-01.ibm.com/support/docview.wss?uid=swg21988263

Details

Source: Mitre, NVD

Published: 2016-08-08

Updated: 2026-05-06

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L