[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4Er-zj0-OFM1Is8bWrmwN8cCIXbTkdr97vBnSn3Ih34":3,"g5a-risk:CVE-2016-2175":242},{"success":4,"data":5,"meta":240},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":88,"references":89,"referencesCount":158,"weaknesses":159,"weaknessesCount":163,"isActivelyExploited":164,"cisaInfo":15,"otxData":15,"relatedBlogPosts":165,"seoMetadata":166,"configurations":191,"relatedVendorCves":238,"notableEvents":239},"CVE-2016-2175","What is CVE-2016-2175?","Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.","Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML Extern...","2016-06-01T20:59:01.747","2025-04-12T10:46:40.837",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","NETWORK","PARTIAL",7.5,10,6.4,0.0384,[39,39,39,39,39,39,39],"High",[43,48,51,54,57,60,63,66,69,72,75,78,81,83],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","pdfbox","1.8.0","cpe:2.3:a:apache:pdfbox:1.8.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"1.8.1","cpe:2.3:a:apache:pdfbox:1.8.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"1.8.2","cpe:2.3:a:apache:pdfbox:1.8.2:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"1.8.3","cpe:2.3:a:apache:pdfbox:1.8.3:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"1.8.4","cpe:2.3:a:apache:pdfbox:1.8.4:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":61,"criteria":62,"vulnerable":4},"1.8.5","cpe:2.3:a:apache:pdfbox:1.8.5:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":64,"criteria":65,"vulnerable":4},"1.8.6","cpe:2.3:a:apache:pdfbox:1.8.6:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":67,"criteria":68,"vulnerable":4},"1.8.7","cpe:2.3:a:apache:pdfbox:1.8.7:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":70,"criteria":71,"vulnerable":4},"1.8.8","cpe:2.3:a:apache:pdfbox:1.8.8:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":73,"criteria":74,"vulnerable":4},"1.8.9","cpe:2.3:a:apache:pdfbox:1.8.9:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":76,"criteria":77,"vulnerable":4},"1.8.10","cpe:2.3:a:apache:pdfbox:1.8.10:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":79,"criteria":80,"vulnerable":4},"1.8.11","cpe:2.3:a:apache:pdfbox:1.8.11:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":32,"criteria":82,"vulnerable":4},"cpe:2.3:a:apache:pdfbox:2.0:*:*:*:*:*:*:*",{"vendor":84,"product":85,"version":86,"criteria":87,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",14,[90,94,98,102,105,108,111,116,119,124,128,131,134,136,138,140,142,144,146,148,150,152,154,156],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fmail-archives.us.apache.org\u002Fmod_mbox\u002Fwww-announce\u002F201605.mbox\u002F%3C83a03bcf-f86b-4688-37b5-615c080291d8%40apache.org%3E","Apache",[],{"url":95,"source":96,"tags":97},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F137214\u002FApache-PDFBox-1.8.11-2.0.0-XML-Injection.html","Packetstormsecurity",[],{"url":99,"source":100,"tags":101},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-0179.html","Red Hat",[],{"url":103,"source":100,"tags":104},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-0248.html",[],{"url":106,"source":100,"tags":107},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-0249.html",[],{"url":109,"source":100,"tags":110},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-0272.html",[],{"url":112,"source":92,"tags":113},"http:\u002F\u002Fsvn.apache.org\u002Fviewvc?view=revision&revision=1739564",[114,115],"Patch","Vendor Advisory",{"url":117,"source":92,"tags":118},"http:\u002F\u002Fsvn.apache.org\u002Fviewvc?view=revision&revision=1739565",[114,115],{"url":120,"source":121,"tags":122},"http:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2016\u002Fdsa-3606","Debian",[123],"Third Party Advisory",{"url":125,"source":126,"tags":127},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F538503\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":129,"source":126,"tags":130},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F90902",[],{"url":132,"source":92,"tags":133},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fad5fbc86c1d1821ae1b963e8561ab6d6a5f66b2848e84f5a31477f54%40%3Ccommits.tika.apache.org%3E",[],{"url":91,"source":92,"tags":135},[],{"url":95,"source":96,"tags":137},[],{"url":99,"source":100,"tags":139},[],{"url":103,"source":100,"tags":141},[],{"url":106,"source":100,"tags":143},[],{"url":109,"source":100,"tags":145},[],{"url":112,"source":92,"tags":147},[114,115],{"url":117,"source":92,"tags":149},[114,115],{"url":120,"source":121,"tags":151},[123],{"url":125,"source":126,"tags":153},[],{"url":129,"source":126,"tags":155},[],{"url":132,"source":92,"tags":157},[],24,[160],{"id":161,"name":161,"description":162},"Unknown","NVD-CWE-Other",1,false,[],{"title":167,"metaDescription":168,"keywords":169,"canonicalUrl":170,"structuredData":171},"What is CVE-2016-2175? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-2175, a high severity cyber security vulnerability from 2016. Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not pr...","CVE-2016-2175, CVE-2016-2175 vulnerability, CVE-2016-2175 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, apache security, pdfbox vulnerability","\u002Fwhat-is\u002Fcve-2016-2175",{"@context":172,"@type":173,"headline":167,"description":168,"datePublished":10,"dateModified":11,"author":174,"publisher":178,"about":182,"mainEntityOfPage":186,"articleSection":189,"keywords":190},"https:\u002F\u002Fschema.org","TechArticle",{"@type":175,"name":176,"url":177},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":175,"name":176,"url":177,"logo":179},{"@type":180,"url":181},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":183,"name":6,"description":184,"additionalType":185},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":187,"@id":188},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-2175","Cybersecurity","CVE-2016-2175, CVE-2016-2175 vulnerability, CVE-2016-2175 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[192,232],{"Operator":15,"Negate":15,"Nodes":193},[194],{"Operator":195,"Negate":15,"CPEMatch":196},"OR",[197,199,201,203,205,207,209,211,213,215,217,219,221,223,226,229],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":198,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3F731F1D-75B3-4A8B-A54A-3E3E94774B4B",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"55675A83-9138-4052-AD50-FBAC6E230A93",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5051901-86CE-47DE-8485-C3504917423F",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":204,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5EA1BD8B-00D6-4B7D-90D9-5B3AC08D22E6",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F5DA1D34-E99F-400E-884F-05B9511669F8",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B095DE26-F565-4EFF-AB4C-D6C3CC88BD6A",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"69E2D87A-3F68-41B0-B69A-90A124CD462C",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":212,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"192AF1D0-31CF-4F65-98DF-E1EB85BE622D",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":214,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CE32BAA0-7B6C-4FAC-85CF-B2B5A56F8F56",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E08AD210-90FB-40E2-9665-450B34EF6FB1",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":218,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7B693709-1B83-4B23-AD54-B002F4ACD4A9",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":220,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E4E1DA3F-E8F8-4424-B224-B2B9A2A93747",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1EBD8054-1545-4A7E-8EE9-36632846FF11",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:apache:pdfbox:2.0:rc1:*:*:*:*:*:*","1E3BD109-5505-45BC-A48D-CDF7D190E4B3",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:apache:pdfbox:2.0:rc2:*:*:*:*:*:*","A3D6D027-1F55-413D-8F7F-7D94C2C2B917",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:apache:pdfbox:2.0:rc3:*:*:*:*:*:*","093E23C1-668C-4EBD-ADA8-C61F46BD3CC3",{"Operator":15,"Negate":15,"Nodes":233},[234],{"Operator":195,"Negate":15,"CPEMatch":235},[236],{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",[],[],{"lastModified":11,"cacheTime":241,"version":32},1792264460790,{"score":243,"band":244,"action":245,"scoredAt":246},49,"Medium","Plan remediation","2026-10-17T07:57:35.753187+00:00"]