Language:
Severity: Critical
ID: 98855
Type: remote
Family: Component Vulnerability
Published: 1/9/2019
Updated: 10/7/2021
Scan Template: pci, api, scan
Risk Factor: Medium
Score: 6.7
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2016-6290
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score Source: CVE-2016-6290
CPE: cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/19/2016
Vulnerability Publication Date: 7/19/2016
CVE: CVE-2016-6293, CVE-2016-5399, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6296, CVE-2016-6297, CVE-2016-6207, CVE-2016-6294, CVE-2016-6292, CVE-2016-6295, CVE-2016-5385
CWE: 119, 284, 190, 125, 416, 476, 787
OWASP: 2013-A9, 2017-A9, 2017-A5, 2010-A8, 2013-A7, 2021-A6, 2021-A1
WASC: Integer Overflows, Buffer Overflow, Insufficient Authorization
OWASP API: 2019-API7
HIPAA: 164.306(a)(1), 164.306(a)(2), 164.312(a)(1), 164.312(a)(2)(i)
DISA STIG: APSC-DV-002630, APSC-DV-000460, APSC-DV-002590
OWASP ASVS: 4.0.2-14.2.1, 4.0.2-1.4.2
PCI-DSS: 3.2-6.2, 3.2-6.5.8, 3.2-6.5, 3.2-6.5.2, 3.2-6.5.1, 3.2-6.3, 3.2-6.4, 3.2-6.6, 3.2-6.7
ISO: 27001-A.14.2.5, 27001-A.13.1.1, 27001-A.14.1.2, 27001-A.14.1.3, 27001-A.18.1.3, 27001-A.6.2.2, 27001-A.9.1.2, 27001-A.9.4.1, 27001-A.9.4.4, 27001-A.9.4.5, 27001-A.12.6.1
CAPEC: 100, 19, 441, 478, 479, 502, 503, 536, 546, 550, 551, 552, 556, 558, 562, 563, 564, 578, 10, 123, 14, 24, 42, 44, 45, 46, 47, 8, 9, 540, 92