Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2016-3255
HistoryJul 13, 2016 - 1:59 a.m.

Information disclosure

2016-07-1301:59:00
PRIOn knowledge base
www.prio-n.com
6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.108 Low

EPSS

Percentile

95.0%

JSON

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka “.NET Information Disclosure Vulnerability.”

Related

mskb 13
cvelist 1
symantec 1
nessus 1
kaspersky 1
openvas 1
mscve 1
cve 1
mskb
mskb
MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: July 12, 2016
2016-07-12 07:00:00
MS16-091: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: July 12, 2016
2016-07-12 07:00:00
Security update 2016-07-12
2016-07-12 07:00:00
cvelist
cvelist
CVE-2016-3255
2016-07-13 01:00:00
symantec
symantec
Microsoft .NET Framework CVE-2016-3255 XML External Entity Information Disclosure Vulnerability
2016-07-12 00:00:00
nessus
nessus
MS16-091: Security Update for .NET Framework (3170048)
2016-07-12 00:00:00
kaspersky
kaspersky
KLA10841 OSI vulnerability in Microsoft Developer Tools
2016-07-12 00:00:00
openvas
openvas
Microsoft .NET Framework Information Disclosure Vulnerability (3170048)
2016-07-13 00:00:00
mscve
mscve
.NET Framework Information Disclosure Vulnerability
2016-07-12 07:00:00
cve
cve
CVE-2016-3255
2016-07-13 01:59:16

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.108 Low

EPSS

Percentile

95.0%

JSON
Related for PRION:CVE-2016-3255
mskb13cvelist1symantec1nessus1kaspersky1openvas1mscve1cve1