CVE-2016-8941

Published: Feb 1, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected (17)

Products: Ibm: Spectrum Control, Tivoli Storage Productivity Center

Ibm

2 products

Spectrum Control

Tivoli Storage Productivity Center

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Spectrum Control	Version 5.2.10
Ibm Spectrum Control	Version 5.2.11
Ibm Spectrum Control	Version 5.2.8
Ibm Spectrum Control	Version 5.2.9

Configuration B

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Productivity Center	Version 5.2.0.0
Ibm Tivoli Storage Productivity Center	Version 5.2.0
Ibm Tivoli Storage Productivity Center	Version 5.2.1.0
Ibm Tivoli Storage Productivity Center	Version 5.2.1.1
Ibm Tivoli Storage Productivity Center	Version 5.2.2.0
Ibm Tivoli Storage Productivity Center	Version 5.2.3.0
Ibm Tivoli Storage Productivity Center	Version 5.2.4.0
Ibm Tivoli Storage Productivity Center	Version 5.2.4.1
Ibm Tivoli Storage Productivity Center	Version 5.2.5.0
Ibm Tivoli Storage Productivity Center	Version 5.2.5.1
Ibm Tivoli Storage Productivity Center	Version 5.2.6.0
Ibm Tivoli Storage Productivity Center	Version 5.2.7.0
Ibm Tivoli Storage Productivity Center	Version 5.2.7.1