PoC Index

CVE-2016-0956

HIGH 7.8EPSS 44.5%

The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS v3.0
7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.0
7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0
7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
EPSS
44.53% chance of exploitation in the next 30 days, 99th percentile
Published
2016-02-10
Updated
2024-08-05

Proof-of-concept exploits (1)

ExploitDB entries (1)

References

Related