CVE-2016-0381

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-15 · updated 2026-06-17
Weakness: CWE-20

Description

IBM Cognos TM1 10.2.2 before FP5, when the host/pmhub/pm/admin AdminGroups setting is empty, allows remote authenticated users to cause a denial of service (configuration outage) via a non-empty value.

Affected products

IBM Cognos TM1: through 10.2.2

References

http://www-01.ibm.com/support/docview.wss?uid=swg21981936
http://www.securitytracker.com/id/1035930
http://www-01.ibm.com/support/docview.wss?uid=swg21981936
http://www.securitytracker.com/id/1035930

Get alerted when CVE-2016-0381 or the next vulnerability affects your stack