# CVEs published 2016-03-14

5 CVEs were published on March 14, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-0208](https://cve.now/CVE-2016-0208.md): IBM WebSphere Commerce 6.x through 6.0.0.11, 7.x through 7.0.0.9, and 8.x before 8.0.0.3 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-0222](https://cve.now/CVE-2016-0222.md): IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arb (no CVSS)
- [CVE-2016-0262](https://cve.now/CVE-2016-0262.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1.1 through 7.1.1.3, 7.5.0 before 7.5.0.9 IFIX004, and 7.6.0 befor (no CVSS)
- [CVE-2016-1731](https://cve.now/CVE-2016-1731.md): Apple Software Update before 2.2 on Windows does not use HTTPS, which makes it easier for man-in-the-middle attackers to spoof updates by mo (no CVSS)
- [CVE-2016-2856](https://cve.now/CVE-2016-2856.md): pt\_chown in the glibc package before 2.19-18+deb8u4 on Debian jessie; the elibc package before 2.15-0ubuntu10.14 on Ubuntu 12.04 LTS and bef (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.