System	Score	Found at
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
epss	0.04016	https://api.first.org/data/v1/epss?cve=CVE-2016-4450
cvssv2	4.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual	medium	https://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
cvssv2	5.0	https://nvd.nist.gov/vuln/detail/CVE-2016-4450
cvssv3.1	7.5	https://nvd.nist.gov/vuln/detail/CVE-2016-4450

Reference id	Reference type	URL
		http://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4450.json
		https://api.first.org/data/v1/epss?cve=CVE-2016-4450
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4450
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
		https://mailman.nginx.org/pipermail/nginx-announce/2016/000179.html
		https://nginx.org/download/patch.2016.write2.txt
		https://nginx.org/download/patch.2016.write2.txt.asc
		https://nginx.org/download/patch.2016.write.txt
		https://nginx.org/download/patch.2016.write.txt.asc
		http://www.debian.org/security/2016/dsa-3592
		http://www.securityfocus.com/bid/90967
		http://www.securitytracker.com/id/1036019
		http://www.ubuntu.com/usn/USN-2991-1
1341462		https://bugzilla.redhat.com/show_bug.cgi?id=1341462
825960		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825960
cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*
cpe:2.3:a:f5:nginx:1.11.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:f5:nginx:1.11.0:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
CVE-2016-4450		https://nvd.nist.gov/vuln/detail/CVE-2016-4450
GLSA-201606-06		https://security.gentoo.org/glsa/201606-06
RHSA-2016:1425		https://access.redhat.com/errata/RHSA-2016:1425
USN-2991-1		https://usn.ubuntu.com/2991-1/

No exploits are available.

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2016-4450

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2016-4450

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.88405
EPSS Score	0.04016
Published At	April 1, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-01T12:31:45.778257+00:00	Nginx Importer	Import	https://nginx.org/en/security_advisories.html	38.0.0