vulnerability
IBM WebSphere Application Server: CVE-2016-3040: Open Redirect vulnerability in WebSphere Application Server Liberty (CVE-2016-3040)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:M/Au:S/C:P/I:P/A:N) | Sep 26, 2016 | Apr 27, 2018 | Aug 11, 2025 |
Severity
5
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:N)
Published
Sep 26, 2016
Added
Apr 27, 2018
Modified
Aug 11, 2025
Description
IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Solutions
ibm-was-install-8-5-pi63929-libertyibm-was-upgrade-8-5-16-0-0-3-liberty
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.