CVE-2016-9717

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-31 · updated 2026-06-17
Weakness: CWE-20

Description

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploited.

Affected products

IBM InfoSphere Master Data Management: 10.1, 11.0, 11.3, 11.4, 11.5, 11.6

References

http://www.ibm.com/support/docview.wss?uid=swg22006605
http://www.securityfocus.com/bid/100074
https://exchange.xforce.ibmcloud.com/vulnerabilities/119730
http://www.ibm.com/support/docview.wss?uid=swg22006605
http://www.securityfocus.com/bid/100074
https://exchange.xforce.ibmcloud.com/vulnerabilities/119730

Get alerted when CVE-2016-9717 or the next vulnerability affects your stack