CVE-2016-2952

LOW · CVSS 3.7 EPSS 1.56%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-11-30 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.7. It may be remotely exploitable.

CVE

CVE-2016-2952

Severity

LOW

CVSS

3.7

EPSS

1.56%

Original NVD Description

IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.