Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-jm55-9n3h-gkb2
Vulnerability ID VCID-jm55-9n3h-gkb2
Aliases CVE-2016-9879
GHSA-v35c-49j6-q8hq
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-20 Improper Input Validation
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-417 Communication Channel Errors
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 7.5 https://access.redhat.com/errata/RHSA-2017:1832
generic_textual HIGH https://access.redhat.com/errata/RHSA-2017:1832
cvssv3 6.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9879.json
epss 0.00322 https://api.first.org/data/v1/epss?cve=CVE-2016-9879
epss 0.00322 https://api.first.org/data/v1/epss?cve=CVE-2016-9879
epss 0.00322 https://api.first.org/data/v1/epss?cve=CVE-2016-9879
epss 0.00322 https://api.first.org/data/v1/epss?cve=CVE-2016-9879
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-v35c-49j6-q8hq
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2016-9879
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2016-9879
cvssv3.1 7.5 https://pivotal.io/security/cve-2016-9879
generic_textual HIGH https://pivotal.io/security/cve-2016-9879
cvssv3.1 7.5 http://www.securityfocus.com/bid/95142
generic_textual HIGH http://www.securityfocus.com/bid/95142
Reference id Reference type URL
https://access.redhat.com/errata/RHSA-2017:1832
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9879.json
https://api.first.org/data/v1/epss?cve=CVE-2016-9879
https://github.com/spring-projects/spring-security/commit/666e356ebc479194ba51e43bb99fc42f849b6175
http://www.securityfocus.com/bid/95142
1409838 https://bugzilla.redhat.com/show_bug.cgi?id=1409838
CVE-2016-9879 https://nvd.nist.gov/vuln/detail/CVE-2016-9879
CVE-2016-9879 https://pivotal.io/security/cve-2016-9879
GHSA-v35c-49j6-q8hq https://github.com/advisories/GHSA-v35c-49j6-q8hq
No exploits are available.
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://access.redhat.com/errata/RHSA-2017:1832
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9879.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2016-9879
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at https://pivotal.io/security/cve-2016-9879
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Found at http://www.securityfocus.com/bid/95142
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.55673
EPSS Score 0.00322
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:20:08.758416+00:00 ProjectKB MSRImporter Import https://raw.githubusercontent.com/SAP/project-kb/master/MSR2019/dataset/vulas_db_msr2019_release.csv 38.6.0