CVE-2016-0326

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-22 · updated 2026-06-17
Weakness: CWE-77

Description

IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted "HTML request."

Affected products

IBM Rational Collaborative Lifecycle Management: 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 (+7)
IBM Rational Quality Manager: 3.0.1.6, 4.0, 4.0.0.1, 4.0.0.2, 4.0.1, 4.0.2 (+10)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21989735
http://www.securityfocus.com/bid/93824
http://www-01.ibm.com/support/docview.wss?uid=swg21989735
http://www.securityfocus.com/bid/93824

Get alerted when CVE-2016-0326 or the next vulnerability affects your stack