[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7Q9g9BkCMw4zptulpkPFcwESH_DPtrER1Q2jxqh0Gm4":3,"g5a-risk:CVE-2016-9976":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":60,"references":61,"referencesCount":77,"weaknesses":78,"weaknessesCount":87,"isActivelyExploited":88,"cisaInfo":15,"otxData":15,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":131,"notableEvents":132},"CVE-2016-9976","What is CVE-2016-9976?","IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL request, which could allow the attacker to execute arbitrary code on the vulnerable server. IBM X-Force ID: 120252.","IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL ...","2017-05-03T17:59:00.22","2025-04-20T01:37:25.86",8.4,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",2.5,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","MEDIUM","PARTIAL",6.8,8.6,6.4,0.01715,[40,40,40,40,40,40,40],"High",[44,49,52,55,58],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"ibm","maximo_asset_management","7.1","cpe:2.3:a:ibm:maximo_asset_management:7.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"7.5","cpe:2.3:a:ibm:maximo_asset_management:7.5:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"7.6","cpe:2.3:a:ibm:maximo_asset_management:7.6:*:*:*:*:*:*:*",{"vendor":45,"product":56,"version":47,"criteria":57,"vulnerable":4},"maximo_asset_management_essentials","cpe:2.3:a:ibm:maximo_asset_management_essentials:7.1:*:*:*:*:*:*:*",{"vendor":45,"product":56,"version":50,"criteria":59,"vulnerable":4},"cpe:2.3:a:ibm:maximo_asset_management_essentials:7.5:*:*:*:*:*:*:*",5,[62,68,73,75],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg22002018","Ibm",[66,67],"Patch","Vendor Advisory",{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F98305","Securityfocus",[72],"Broken Link",{"url":63,"source":64,"tags":74},[66,67],{"url":69,"source":70,"tags":76},[72],4,[79],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",1,false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2016-9976? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-9976, a high severity cyber security vulnerability from 2017. IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a ...","CVE-2016-9976, CVE-2016-9976 vulnerability, CVE-2016-9976 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, ibm security, maximo_asset_management vulnerability, maximo_asset_management_essentials vulnerability","\u002Fwhat-is\u002Fcve-2016-9976",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-9976","Cybersecurity","CVE-2016-9976, CVE-2016-9976 vulnerability, CVE-2016-9976 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":15,"Negate":15,"Nodes":117},[118],{"Operator":119,"Negate":15,"CPEMatch":120},"OR",[121,123,125,127,129],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DE721CF9-0F75-410B-A0F4-542041E25925",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1AEBAE48-FFD0-4837-AB3B-F6C31B1AC8D9",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"58B773C7-9386-4704-B85F-748578DBC242",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"85457F6C-80FE-4E9F-BAB6-58B0485D8B7B",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":130,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"598EAB6C-7D41-46FE-BB32-D31014CA01D6",[],[],{"lastModified":11,"cacheTime":134,"version":32},1793205290089,{"score":136,"band":137,"action":138,"scoredAt":139},47,"Medium","Plan remediation","2026-07-01T10:20:35.252238+00:00"]