CVE-2016-8580 EXPLOIT
9.8
CRITICAL · CVSS 3.0 · EPSS 6.9% (pctl 94)
Patch early
A public exploit exists.
Description
PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 6.86% — more likely to be exploited than 94% of all CVEs |
| Weakness | CWE-284 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2016-10-28 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| alienvault | open source security information and event management |
| alienvault | unified security management |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | AlienVault OSSIM/USM < 5.3.1 - Remote Code Execution (Metasploit) | 2017-01-31 |
| exploit-db | Alienvault OSSIM/USM 5.3.1 - PHP Object Injection | 2016-11-02 |
References
- http://www.securityfocus.com/bid/93864
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities
- https://www.exploit-db.com/exploits/40682/
- http://www.securityfocus.com/bid/93864
- https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities
- https://www.exploit-db.com/exploits/40682/
→ the Explorer · watch your stack · NVD