National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

Vulnerability Change Record for CVE-2016-6795

Change History

Initial Analysis - 9/29/2017 12:11:02 PM

Action Type Old Value New Value
Added CVSS V3
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Changed Reference Type
http://www.securityfocus.com/bid/93773 No Types Assigned
http://www.securityfocus.com/bid/93773 Third Party Advisory, VDB Entry
Added CWE
CWE-22
Changed Reference Type
https://struts.apache.org/docs/s2-042.html No Types Assigned
https://struts.apache.org/docs/s2-042.html Vendor Advisory
Added CPE Configuration
OR
     *cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*
     *cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*
Added CVSS V2
(AV:N/AC:L/Au:N/C:P/I:P/A:P)