CVE-2016-9449

🗓️ 25 Nov 2016 18:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 69 Views

Drupal 7.x/8.x before 7.52/8.2.3 allows remote authenticated users to obtain sensitive information

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Drupal Core affect IBM API Management (CVE-2016-9449, CVE-2016-9450, CVE-2016-9451, CVE-2016-9452)	15 Jun 201807:07	–	ibm
Tenable Nessus	Drupal 7.x < 7.52 Multiple Vulnerabilites	2 Dec 201600:00	–	nessus
Tenable Nessus	Drupal 8.x < 8.2.3 Multiple Vulnerabilites	2 Dec 201600:00	–	nessus
Tenable Nessus	Debian DLA-715-1 : drupal7 security update	22 Nov 201600:00	–	nessus
Tenable Nessus	Debian DSA-3718-1 : drupal7 - security update	18 Nov 201600:00	–	nessus
Tenable Nessus	Drupal 7.x < 7.52 / 8.x < 8.2.3 Multiple Vulnerabilities	21 Nov 201600:00	–	nessus
Tenable Nessus	Fedora 24 : drupal7 (2016-1cc5edde49)	30 Nov 201600:00	–	nessus
Tenable Nessus	Fedora 25 : drupal7 (2016-95b1be8a3d)	30 Nov 201600:00	–	nessus
Tenable Nessus	Fedora 23 : drupal7 (2016-ff9a74c6dc)	1 Dec 201600:00	–	nessus
Tenable Nessus	FreeBSD : Drupal Code -- Multiple Vulnerabilities (8db24888-b2f5-11e6-8153-00248c0c745d)	28 Nov 201600:00	–	nessus

NVD

Node

drupal drupalMatch8.0.0

OR

drupal drupalMatch8.0.0alpha10

OR

drupal drupalMatch8.0.0alpha11

OR

drupal drupalMatch8.0.0alpha12

OR

drupal drupalMatch8.0.0alpha13

OR

drupal drupalMatch8.0.0alpha14

OR

drupal drupalMatch8.0.0alpha15

OR

drupal drupalMatch8.0.0alpha2

OR

drupal drupalMatch8.0.0alpha3

OR

drupal drupalMatch8.0.0alpha4

OR

drupal drupalMatch8.0.0alpha5

OR

drupal drupalMatch8.0.0alpha6

OR

drupal drupalMatch8.0.0alpha7

OR

drupal drupalMatch8.0.0alpha8

OR

drupal drupalMatch8.0.0alpha9

OR

drupal drupalMatch8.0.0beta1

OR

drupal drupalMatch8.0.0beta10

OR

drupal drupalMatch8.0.0beta11

OR

drupal drupalMatch8.0.0beta12

OR

drupal drupalMatch8.0.0beta13

OR

drupal drupalMatch8.0.0beta14

OR

drupal drupalMatch8.0.0beta15

OR

drupal drupalMatch8.0.0beta16

OR

drupal drupalMatch8.0.0beta2

OR

drupal drupalMatch8.0.0beta3

OR

drupal drupalMatch8.0.0beta4

OR

drupal drupalMatch8.0.0beta6

OR

drupal drupalMatch8.0.0beta7

OR

drupal drupalMatch8.0.0beta9

OR

drupal drupalMatch8.0.0rc1

OR

drupal drupalMatch8.0.0rc2

OR

drupal drupalMatch8.0.0rc3

OR

drupal drupalMatch8.0.0rc4

OR

drupal drupalMatch8.0.1

OR

drupal drupalMatch8.0.2

OR

drupal drupalMatch8.0.3

OR

drupal drupalMatch8.0.4

OR

drupal drupalMatch8.0.5

OR

drupal drupalMatch8.0.6

OR

drupal drupalMatch8.1.0

OR

drupal drupalMatch8.1.0beta1

OR

drupal drupalMatch8.1.0beta2

OR

drupal drupalMatch8.1.0rc1

OR

drupal drupalMatch8.1.1

OR

drupal drupalMatch8.1.2

OR

drupal drupalMatch8.1.3

OR

drupal drupalMatch8.1.4

OR

drupal drupalMatch8.1.5

OR

drupal drupalMatch8.1.6

OR

drupal drupalMatch8.1.7

OR

drupal drupalMatch8.1.8

OR

drupal drupalMatch8.1.9

OR

drupal drupalMatch8.1.10

OR

drupal drupalMatch8.2.0

OR

drupal drupalMatch8.2.0beta1

OR

drupal drupalMatch8.2.0beta2

OR

drupal drupalMatch8.2.0beta3

OR

drupal drupalMatch8.2.0rc1

OR

drupal drupalMatch8.2.0rc2

OR

drupal drupalMatch8.2.1

OR

drupal drupalMatch8.2.2

Node

drupal drupalMatch7.0

OR

drupal drupalMatch7.0alpha1

OR

drupal drupalMatch7.0alpha2

OR

drupal drupalMatch7.0alpha3

OR

drupal drupalMatch7.0alpha4

OR

drupal drupalMatch7.0alpha5

OR

drupal drupalMatch7.0alpha6

OR

drupal drupalMatch7.0alpha7

OR

drupal drupalMatch7.0beta1

OR

drupal drupalMatch7.0beta2

OR

drupal drupalMatch7.0beta3

OR

drupal drupalMatch7.0dev

OR

drupal drupalMatch7.0rc1

OR

drupal drupalMatch7.0rc2

OR

drupal drupalMatch7.0rc3

OR

drupal drupalMatch7.0rc4

OR

drupal drupalMatch7.1

OR

drupal drupalMatch7.2

OR

drupal drupalMatch7.3

OR

drupal drupalMatch7.4

OR

drupal drupalMatch7.10

OR

drupal drupalMatch7.11

OR

drupal drupalMatch7.12

OR

drupal drupalMatch7.13

OR

drupal drupalMatch7.14

OR

drupal drupalMatch7.15

OR

drupal drupalMatch7.16

OR

drupal drupalMatch7.17

OR

drupal drupalMatch7.18

OR

drupal drupalMatch7.19

OR

drupal drupalMatch7.20

OR

drupal drupalMatch7.21

OR

drupal drupalMatch7.22

OR

drupal drupalMatch7.23

OR

drupal drupalMatch7.24

OR

drupal drupalMatch7.25

OR

drupal drupalMatch7.26

OR

drupal drupalMatch7.27

OR

drupal drupalMatch7.28

OR

drupal drupalMatch7.29

OR

drupal drupalMatch7.30

OR

drupal drupalMatch7.31

OR

drupal drupalMatch7.32

OR

drupal drupalMatch7.33

OR

drupal drupalMatch7.34

OR

drupal drupalMatch7.35

OR

drupal drupalMatch7.36

OR

drupal drupalMatch7.37

OR

drupal drupalMatch7.38

OR

drupal drupalMatch7.40

OR

drupal drupalMatch7.41

OR

drupal drupalMatch7.42

OR

drupal drupalMatch7.43

OR

drupal drupalMatch7.44

OR

drupal drupalMatch7.50

OR

drupal drupalMatch7.51

Source	Link
drupal	www.drupal.org/SA-CORE-2016-005
debian	www.debian.org/security/2016/dsa-3718
securityfocus	www.securityfocus.com/bid/94367

06 May 2026 22:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24

CVSS 34.3

EPSS0.00215

cve-2016-9449 drupal taxonomy module sensitive information remote authenticated users access query tags