CVE-2016-5979: IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an insta...

Security readout for executives and security teams

This vulnerability can let a privileged IBM Distributed Marketing user create an instance with a security profile that does not match its templates. The practical result is that the intended user may be unable to access the new instance. The sources do not provide CVSS, severity, or confirmed exploitation details. Exposure is limited to organizations still running affected IBM Distributed Marketing versions. The issue requires a privileged authenticated user, so internet-facing unauthenticated exposure is not supported by the provided sources. Treat this as a targeted operational risk for affected IBM Distributed Marketing environments, not a broad emergency. Prioritize validation if the platform supports business-critical campaigns or if many users have privileged creation rights. Mitigation focus: Inventory IBM Distributed Marketing deployments and confirm affected versions.; Review IBM advisory swg21999526 for vendor-approved fixes or guidance.; Restrict privileged instance-creation rights to trusted administrators only..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.