{"api_version":"1","generated_at":"2026-07-08T01:23:55+00:00","cve":"CVE-2026-3366","urls":{"html":"https://cve.report/CVE-2026-3366","api":"https://cve.report/api/cve/CVE-2026-3366.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-3366","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-3366"},"summary":{"title":"InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read","description":"IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system","state":"PUBLISHED","assigner":"ibm","published_at":"2026-05-27 14:16:46","updated_at":"2026-06-02 19:50:24"},"problem_types":["CWE-22","CWE-22 CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Primary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7272653","name":"https://www.ibm.com/support/pages/node/7272653","refsource":"psirt@us.ibm.com","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3366","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3366","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"InfoSphere Optim Test Data Fabrication","version":"affected 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 1.8.4 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"N/A","time":"","lang":"en"}],"workarounds":[{"source":"CNA","title":"","value":"Workarounds are available. Contact TechSupport for instructions and resolution.","time":"","lang":"en"}],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2026","cve_id":"3366","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"infosphere_optim_test_data_fabrication","cpe6":"1.0.2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"3366","cve":"CVE-2026-3366","epss":"0.000690000","percentile":"0.214080000","score_date":"2026-06-08","updated_at":"2026-06-09 00:12:52"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-3366","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-05-27T15:28:53.446003Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-05-27T15:29:01.263Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"cpes":["cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.0:*:*:*:*:*:*:*"],"product":"InfoSphere Optim Test Data Fabrication","vendor":"IBM","versions":[{"lessThanOrEqual":"1.8.4","status":"affected","version":"1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7","versionType":"semver"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system

"}],"value":"IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-05-27T12:25:53.944Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7272653"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

N/A

"}],"value":"N/A"}],"title":"InfoSphere Optim Test Data Fabrication is affected by Arbitrary File Read","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

Workarounds are available. Contact TechSupport for instructions and resolution.

"}],"value":"Workarounds are available. Contact TechSupport for instructions and resolution."}],"x_generator":{"engine":"ibm-cvegen"}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2026-3366","datePublished":"2026-05-27T12:25:53.944Z","dateReserved":"2026-02-27T20:51:53.492Z","dateUpdated":"2026-05-27T15:29:01.263Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-05-27 14:16:46","lastModifiedDate":"2026-06-02 19:50:24","problem_types":["CWE-22","CWE-22 CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D5611AB3-7A46-4E21-A37A-DDE8E4E9F774"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E8F06925-6B91-4662-A7DF-25E37584F572"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"63E07893-8F21-4440-AFCE-F660D846BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CF933115-2F52-422E-B5E1-D6A284A798CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2E6B3F23-BBB6-42C3-B7EA-82EFA95C9E3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA8F6DC0-17C6-4A3B-883E-22665E618465"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5E692C79-E4AA-4096-8DEF-296830A74A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"6023BB0E-847E-44F4-8C6B-1C7C88A451EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8044AC4D-1C6F-4313-87D5-B5B1090E9C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:infosphere_optim_test_data_fabrication:1.0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9D2C513C-9040-4E19-8D90-D032B37CFE27"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"3366","Ordinal":"1","Title":"InfoSphere Optim Test Data Fabrication is affected by Arbitrary ","CVE":"CVE-2026-3366","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"3366","Ordinal":"1","NoteData":"IBM InfoSphere Optim Test Data Fabrication 1.0.0, 1.0.0.1, 1.0.0.2, 1.0.2, 1.0.2.2, 1.0.2.3, 1.0.2.4, 1.0.2.5, 1.0.2.6, 1.0.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system","Type":"Description","Title":"InfoSphere Optim Test Data Fabrication is affected by Arbitrary "}]}}}