CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. It may be remotely exploitable.
CVE
CVE-2016-6104
Severity
HIGH
CVSS
7.2
EPSS
2.69%
Original NVD Description
IBM Tivoli Key Lifecycle Manager 2.5, and 2.6 could allow a remote attacker to upload arbitrary files, caused by the improper validation of file extensions, which could allow the attacker to execute arbitrary code on the vulnerable system.