CVE-2016-0956

The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N

EPSS

51.15% chance of exploitation in the next 30 days, 99th percentile

Published

2016-02-10

Updated

2024-08-05

Proof-of-concept exploits (1)

• securibee/Twitter-Seclists91★ · 2021-04-12

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39435

Security advisories

• https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html
• advisories/GHSA-m27m-628v-xxp2

References

• CVE Record
• NVD entry

Related

• CVE-2013-6674