Search for vulnerabilities
Vulnerability details: VCID-hbwd-7s88-dyfn
Vulnerability ID VCID-hbwd-7s88-dyfn
Aliases CVE-2016-0800
Summary SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)
Status Published
Exploitability 2.0
Weighted Severity 0.8
Risk 1.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.89469 https://api.first.org/data/v1/epss?cve=CVE-2016-0800
epss 0.89821 https://api.first.org/data/v1/epss?cve=CVE-2016-0800
epss 0.89821 https://api.first.org/data/v1/epss?cve=CVE-2016-0800
epss 0.89821 https://api.first.org/data/v1/epss?cve=CVE-2016-0800
epss 0.89821 https://api.first.org/data/v1/epss?cve=CVE-2016-0800
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json
https://api.first.org/data/v1/epss?cve=CVE-2016-0800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0800
1310593 https://bugzilla.redhat.com/show_bug.cgi?id=1310593
RHSA-2016:0301 https://access.redhat.com/errata/RHSA-2016:0301
RHSA-2016:0302 https://access.redhat.com/errata/RHSA-2016:0302
RHSA-2016:0303 https://access.redhat.com/errata/RHSA-2016:0303
RHSA-2016:0304 https://access.redhat.com/errata/RHSA-2016:0304
RHSA-2016:0305 https://access.redhat.com/errata/RHSA-2016:0305
RHSA-2016:0306 https://access.redhat.com/errata/RHSA-2016:0306
RHSA-2016:0372 https://access.redhat.com/errata/RHSA-2016:0372
RHSA-2016:0379 https://access.redhat.com/errata/RHSA-2016:0379
RHSA-2016:0445 https://access.redhat.com/errata/RHSA-2016:0445
RHSA-2016:0446 https://access.redhat.com/errata/RHSA-2016:0446
RHSA-2016:0490 https://access.redhat.com/errata/RHSA-2016:0490
RHSA-2016:1519 https://access.redhat.com/errata/RHSA-2016:1519
Data source Metasploit
Description Check if a server supports a given version of SSL/TLS and cipher suites. The certificate is stored in loot, and any known vulnerabilities against that SSL version and cipher suite combination are checked. These checks include POODLE, deprecated protocols, expired/not valid certs, low key strength, null cipher suites, certificates signed with MD5, DROWN, RC4 ciphers, exportable ciphers, LOGJAM, and BEAST.
Note 
{}
Ransomware campaign use Unknown
Source publication date Oct. 14, 2014
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/ssl/ssl_version.rb
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.99538
EPSS Score 0.89469
Published At Aug. 3, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T11:01:17.502429+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0800.json 37.0.0