Search for vulnerabilities
Vulnerability details: VCID-gjyt-m1m5-aaas
Vulnerability ID VCID-gjyt-m1m5-aaas
Aliases CVE-2016-6812
GHSA-vw2c-5wph-v92r
Summary Cross-site Scripting The HTTP transport module in Apache CXF uses `FormattedServiceListWriter` to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current `HttpServletRequest` which is used by `FormattedServiceListWriter` to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 6.1 http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc
generic_textual MODERATE http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc
rhas Important https://access.redhat.com/errata/RHSA-2017:0868
cvssv3 6.1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6812.json
epss 0.00140 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00140 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00140 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00140 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.0656 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
epss 0.06575 https://api.first.org/data/v1/epss?cve=CVE-2016-6812
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=1406810
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-vw2c-5wph-v92r
cvssv3.1 3.7 https://github.com/apache/cxf
generic_textual LOW https://github.com/apache/cxf
cvssv3.1 6.1 https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12
generic_textual MODERATE https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12
cvssv3.1 6.1 https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7
generic_textual MODERATE https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7
cvssv3.1 6.1 https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e
generic_textual MODERATE https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e
cvssv3.1 6.1 https://github.com/apache/cxf/commit/a30397b0
generic_textual MODERATE https://github.com/apache/cxf/commit/a30397b0
cvssv3.1 6.1 https://issues.apache.org/jira/browse/CXF-6216
generic_textual MODERATE https://issues.apache.org/jira/browse/CXF-6216
cvssv3.1 6.1 https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
generic_textual CRITICAL https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
cvssv3.1 5.3 https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
cvssv3.1 7.5 https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
generic_textual HIGH https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
cvssv3.1 7.5 https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
generic_textual HIGH https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
cvssv3.1 9.8 https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2016-6812
cvssv3 6.1 https://nvd.nist.gov/vuln/detail/CVE-2016-6812
Reference id Reference type URL
http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6812.json
https://api.first.org/data/v1/epss?cve=CVE-2016-6812
https://github.com/apache/cxf
https://github.com/apache/cxf/commit/1be97cb1
https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12
https://github.com/apache/cxf/commit/1f824d80
https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7
https://github.com/apache/cxf/commit/32e89366
https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e
https://github.com/apache/cxf/commit/45b1b5b9
https://github.com/apache/cxf/commit/a23c615b
https://github.com/apache/cxf/commit/a30397b0
https://issues.apache.org/jira/browse/CXF-6216
https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
http://www.securityfocus.com/bid/97582
http://www.securitytracker.com/id/1037543
1406810 https://bugzilla.redhat.com/show_bug.cgi?id=1406810
cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.0:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.2:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.3:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.4:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.5:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.7:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.7:*:*:*:*:*:*:*
cpe:2.3:a:apache:cxf:3.1.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:cxf:3.1.8:*:*:*:*:*:*:*
CVE-2016-6812 https://nvd.nist.gov/vuln/detail/CVE-2016-6812
GHSA-vw2c-5wph-v92r https://github.com/advisories/GHSA-vw2c-5wph-v92r
RHSA-2017:0868 https://access.redhat.com/errata/RHSA-2017:0868
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at http://cxf.apache.org/security-advisories.data/CVE-2016-6812.txt.asc
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6812.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://github.com/apache/cxf
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/apache/cxf/commit/1be97cb13aef121b799b1be4d9793c0e8b925a12
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/apache/cxf/commit/1f824d8039c7a42a4aa46f844e6c800e1143c7e7
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/apache/cxf/commit/32e89366e2daa5670ac7a5c5c19f0bf9329a4c1e
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/apache/cxf/commit/a30397b0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://issues.apache.org/jira/browse/CXF-6216
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4%40%3Ccommits.cxf.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2016-6812
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2016-6812
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.50096
EPSS Score 0.00140
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.