[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpKVsrd_tlso9OHwm6MUjJxMGhDNNcKUQpO4rtJDbHFA":3,"g5a-risk:CVE-2016-3088":169},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":27,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":55,"references":56,"referencesCount":119,"weaknesses":120,"weaknessesCount":55,"isActivelyExploited":4,"cisaInfo":128,"otxData":27,"relatedBlogPosts":129,"seoMetadata":130,"configurations":155,"relatedVendorCves":165,"notableEvents":166},"CVE-2016-3088","What is CVE-2016-3088?","The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.","The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by...","2016-06-01T20:59:04.123","2025-10-22T00:15:50.3",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,"",10,6.4,false,0.98518,[46,46,46,46,46,46,46],"Critical",[50],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"apache","activemq","*","cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",1,[57,62,67,73,77,80,85,89,92,97,99,101,103,105,107,109,111,113,115],{"url":58,"source":59,"tags":60},"http:\u002F\u002Factivemq.apache.org\u002Fsecurity-advisories.data\u002FCVE-2016-3088-announcement.txt","Apache",[61],"Vendor Advisory",{"url":63,"source":64,"tags":65},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-2036.html","Red Hat",[66],"Third Party Advisory",{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035951","Securitytracker",[71,66,72],"Broken Link","VDB Entry",{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-16-356","Zerodayinitiative",[66,72],{"url":78,"source":75,"tags":79},"http:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-16-357",[66,72],{"url":81,"source":59,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fa859563f05fbe7c31916b3178c2697165bd9bbf5a65d1cf62aef27d2%40%3Ccommits.activemq.apache.org%3E",[83,84],"Mailing List","Patch",{"url":86,"source":59,"tags":87},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff956ea38e4da2e2c1e7131e6f91e41754852f5a4861d1a14ca5ca78a%40%3Cusers.activemq.apache.org%3E",[88,83],"Issue Tracking",{"url":90,"source":59,"tags":91},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",[83,61],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F42283\u002F","Exploit-db",[96,66,72],"Exploit",{"url":58,"source":59,"tags":98},[61],{"url":63,"source":64,"tags":100},[66],{"url":68,"source":69,"tags":102},[71,66,72],{"url":74,"source":75,"tags":104},[66,72],{"url":78,"source":75,"tags":106},[66,72],{"url":81,"source":59,"tags":108},[83,84],{"url":86,"source":59,"tags":110},[88,83],{"url":90,"source":59,"tags":112},[83,61],{"url":93,"source":94,"tags":114},[96,66,72],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3088","CISA",[],19,[121],{"id":122,"name":123,"description":124,"extendedDescription":42,"status":125,"abstraction":126,"structure":127},"CWE-434","Unrestricted Upload of File with Dangerous Type","The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.","Draft","Base","Simple",{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":131,"metaDescription":132,"keywords":133,"canonicalUrl":134,"structuredData":135},"What is CVE-2016-3088? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3088, a critical severity cyber security vulnerability from 2016. High exploit probability (98.5%). The Fileserver web app...","CVE-2016-3088, CVE-2016-3088 vulnerability, CVE-2016-3088 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, apache security, activemq vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2016-3088",{"@context":136,"@type":137,"headline":131,"description":132,"datePublished":10,"dateModified":11,"author":138,"publisher":142,"about":146,"mainEntityOfPage":150,"articleSection":153,"keywords":154},"https:\u002F\u002Fschema.org","TechArticle",{"@type":139,"name":140,"url":141},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":139,"name":140,"url":141,"logo":143},{"@type":144,"url":145},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":147,"name":6,"description":148,"additionalType":149},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":151,"@id":152},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3088","Cybersecurity","CVE-2016-3088, CVE-2016-3088 vulnerability, CVE-2016-3088 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[156],{"Operator":27,"Negate":27,"Nodes":157},[158],{"Operator":159,"Negate":45,"CPEMatch":160},"OR",[161],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":163,"VersionEndExcluding":164,"VersionEndIncluding":27},"D44743D6-E0CE-44B1-80CA-B760434FC850","5.0.0","5.14.0",[],[],{"lastModified":11,"cacheTime":168,"version":38},1792349794221,{"score":170,"band":48,"action":171,"scoredAt":172},90,"Emergency patch","2026-10-17T07:57:35.755023+00:00"]