CVE-2016-8580

🗓️ 28 Oct 2016 15:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

"CVE-2016-8580 PHP object injection vulnerabilities in AlienVault OSSIM and USM

Reporter	Title	Published	Views	Family All 9
0day.today	Alienvault OSSIM/USM 5.3.1 - PHP Object Injection Vulnerability	2 Nov 201600:00	–	zdt
Circl	CVE-2016-8580	2 Nov 201600:00	–	circl
CNVD	Alienvault OSSIM and USM PHP Object Injection Vulnerabilities	30 Oct 201600:00	–	cnvd
Cvelist	CVE-2016-8580	28 Oct 201615:00	–	cvelist
Exploit DB	Alienvault OSSIM/USM 5.3.1 - PHP Object Injection	2 Nov 201600:00	–	exploitdb
exploitpack	Alienvault OSSIMUSM 5.3.1 - PHP Object Injection	2 Nov 201600:00	–	exploitpack
NVD	CVE-2016-8580	28 Oct 201615:59	–	nvd
Packet Storm	Alienvault OSSIM/USM 5.3.1 PHP Object Injection	2 Nov 201600:00	–	packetstorm
Prion	Design/Logic Flaw	28 Oct 201615:59	–	prion

NVD

Node

alienvault open_source_security_information_and_event_managementRange≤5.3.1

OR

alienvault unified_security_managementRange≤5.3.1

Source	Link
exploit-db	www.exploit-db.com/exploits/40682/
securityfocus	www.securityfocus.com/bid/93864
alienvault	www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities

Parameter	Position	Path	Description	CWE
value	query param	/ossim/dashboard/sections/widgets/data/image.php	PHP object injection via unserialize() in image.php triggered by serialized object in the value parameter (POC uses IDS_Report to cause code execution).	CWE-284

17 Jun 2026 00:54Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

EPSS0.06861

cve-2016-8580 php object injection vulnerabilities alienvault ossim usm nvd