Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-3255
HistoryJul 13, 2016 - 1:59 a.m.

CVE-2016-3255

2016-07-1301:59:16
CWE-200
[email protected]
web.nvd.nist.gov
4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.136

Percentile

95.7%

JSON

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka “.NET Information Disclosure Vulnerability.”

Affected configurations

Nvd
Node
microsoft.net_frameworkMatch2.0sp2
OR
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch3.5.1
OR
microsoft.net_frameworkMatch4.5.2
OR
microsoft.net_frameworkMatch4.6
OR
microsoft.net_frameworkMatch4.6.1
VendorProductVersionCPE
microsoft.net_framework2.0cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
microsoft.net_framework3.5cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
microsoft.net_framework3.5.1cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
microsoft.net_framework4.5.2cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
microsoft.net_framework4.6cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
microsoft.net_framework4.6.1cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*

Related

symantec 1
cvelist 1
mskb 13
kaspersky 1
mscve 1
nessus 1
openvas 1
cve 1
prion 1
symantec
symantec
Microsoft .NET Framework CVE-2016-3255 XML External Entity Information Disclosure Vulnerability
2016-07-12 00:00:00
cvelist
cvelist
CVE-2016-3255
2016-07-13 01:00:00
mskb
mskb
MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: July 12, 2016
2016-07-12 07:00:00
MS16-091: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: July 12, 2016
2016-07-12 07:00:00
Security update 2016-07-12
2016-07-12 07:00:00
kaspersky
kaspersky
KLA10841 OSI vulnerability in Microsoft Developer Tools
2016-07-12 00:00:00
mscve
mscve
.NET Framework Information Disclosure Vulnerability
2016-07-12 07:00:00
nessus
nessus
MS16-091: Security Update for .NET Framework (3170048)
2016-07-12 00:00:00
openvas
openvas
Microsoft .NET Framework Information Disclosure Vulnerability (3170048)
2016-07-13 00:00:00
cve
cve
CVE-2016-3255
2016-07-13 01:59:16
prion
prion
Information disclosure
2016-07-13 01:59:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.136

Percentile

95.7%

JSON
Related for NVD:CVE-2016-3255
symantec1cvelist1mskb13kaspersky1mscve1nessus1openvas1cve1prion1