[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzhEjhJ7Cv5Yj26izm06QIcvlkPdaQBEekhw58cLV990":3,"g5a-risk:CVE-2016-3115":262},{"success":4,"data":5,"meta":260},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":196,"weaknesses":197,"weaknessesCount":201,"isActivelyExploited":202,"cisaInfo":15,"otxData":15,"relatedBlogPosts":203,"seoMetadata":204,"configurations":229,"relatedVendorCves":244,"notableEvents":245},"CVE-2016-3115","What is CVE-2016-3115?","Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.","Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restri...","2016-03-22T10:59:02.917","2025-04-12T10:46:40.837",6.4,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","CHANGED","MEDIUM",3.1,2.7,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,8,4.9,0.3553,[39,39,39,39,39,39,39],"Medium",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"openbsd","openssh","*","cpe:2.3:a:openbsd:openssh:*:p1:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","vm_server","3.2","cpe:2.3:o:oracle:vm_server:3.2:*:*:*:*:*:*:*",2,[55,59,62,66,69,72,75,78,81,85,89,92,96,99,104,108,111,114,118,122,126,130,134,138,142,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fcvsweb.openbsd.org\u002Fcgi-bin\u002Fcvsweb\u002Fsrc\u002Fusr.bin\u002Fssh\u002Fsession.c","Openbsd",[],{"url":60,"source":57,"tags":61},"http:\u002F\u002Fcvsweb.openbsd.org\u002Fcgi-bin\u002Fcvsweb\u002Fsrc\u002Fusr.bin\u002Fssh\u002Fsession.c.diff?r1=1.281&r2=1.282&f=h",[],{"url":63,"source":64,"tags":65},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F183101.html","Fedoraproject",[],{"url":67,"source":64,"tags":68},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-April\u002F183122.html",[],{"url":70,"source":64,"tags":71},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-March\u002F178838.html",[],{"url":73,"source":64,"tags":74},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-March\u002F179924.html",[],{"url":76,"source":64,"tags":77},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-March\u002F180491.html",[],{"url":79,"source":64,"tags":80},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-May\u002F184264.html",[],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F136234\u002FOpenSSH-7.2p1-xauth-Command-Injection-Bypass.html","Packetstormsecurity",[],{"url":86,"source":87,"tags":88},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-0465.html","Red Hat",[],{"url":90,"source":87,"tags":91},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2016-0466.html",[],{"url":93,"source":94,"tags":95},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2016\u002FMar\u002F46","Seclists",[],{"url":97,"source":94,"tags":98},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2016\u002FMar\u002F47",[],{"url":100,"source":101,"tags":102},"http:\u002F\u002Fwww.openssh.com\u002Ftxt\u002Fx11fwd.adv","Openssh",[103],"Vendor Advisory",{"url":105,"source":106,"tags":107},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fbulletinapr2016-2952098.html","Oracle",[],{"url":109,"source":106,"tags":110},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Flinuxbulletinapr2016-2952096.html",[],{"url":112,"source":106,"tags":113},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fovmbulletinjul2016-3090546.html",[103],{"url":115,"source":116,"tags":117},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F84314","Securityfocus",[],{"url":119,"source":120,"tags":121},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1035249","Securitytracker",[],{"url":123,"source":124,"tags":125},"https:\u002F\u002Fbto.bluecoat.com\u002Fsecurity-advisory\u002Fsa121","Bluecoat",[],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fgithub.com\u002Ftintinweb\u002Fpub\u002Ftree\u002Fmaster\u002Fpocs\u002Fcve-2016-3115","GitHub",[],{"url":131,"source":132,"tags":133},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F09\u002Fmsg00010.html","Debian",[],{"url":135,"source":136,"tags":137},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201612-18","Gentoo",[],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39569\u002F","Exploit-db",[],{"url":143,"source":144,"tags":145},"https:\u002F\u002Fwww.freebsd.org\u002Fsecurity\u002Fadvisories\u002FFreeBSD-SA-16:14.openssh.asc","Freebsd",[],{"url":56,"source":57,"tags":147},[],{"url":60,"source":57,"tags":149},[],{"url":63,"source":64,"tags":151},[],{"url":67,"source":64,"tags":153},[],{"url":70,"source":64,"tags":155},[],{"url":73,"source":64,"tags":157},[],{"url":76,"source":64,"tags":159},[],{"url":79,"source":64,"tags":161},[],{"url":82,"source":83,"tags":163},[],{"url":86,"source":87,"tags":165},[],{"url":90,"source":87,"tags":167},[],{"url":93,"source":94,"tags":169},[],{"url":97,"source":94,"tags":171},[],{"url":100,"source":101,"tags":173},[103],{"url":105,"source":106,"tags":175},[],{"url":109,"source":106,"tags":177},[],{"url":112,"source":106,"tags":179},[103],{"url":115,"source":116,"tags":181},[],{"url":119,"source":120,"tags":183},[],{"url":123,"source":124,"tags":185},[],{"url":127,"source":128,"tags":187},[],{"url":131,"source":132,"tags":189},[],{"url":135,"source":136,"tags":191},[],{"url":139,"source":140,"tags":193},[],{"url":143,"source":144,"tags":195},[],50,[198],{"id":199,"name":199,"description":200},"Unknown","NVD-CWE-Other",1,false,[],{"title":205,"metaDescription":206,"keywords":207,"canonicalUrl":208,"structuredData":209},"What is CVE-2016-3115? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3115, a medium severity cyber security vulnerability from 2016. High exploit probability (35.5%). Multiple CRLF injection ...","CVE-2016-3115, CVE-2016-3115 vulnerability, CVE-2016-3115 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, openbsd security, oracle security, openssh vulnerability, vm_server vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2016-3115",{"@context":210,"@type":211,"headline":205,"description":206,"datePublished":10,"dateModified":11,"author":212,"publisher":216,"about":220,"mainEntityOfPage":224,"articleSection":227,"keywords":228},"https:\u002F\u002Fschema.org","TechArticle",{"@type":213,"name":214,"url":215},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":213,"name":214,"url":215,"logo":217},{"@type":218,"url":219},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":221,"name":6,"description":222,"additionalType":223},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":225,"@id":226},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3115","Cybersecurity","CVE-2016-3115, CVE-2016-3115 vulnerability, CVE-2016-3115 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[230,238],{"Operator":15,"Negate":15,"Nodes":231},[232],{"Operator":233,"Negate":15,"CPEMatch":234},"OR",[235],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":237},"0CA7032F-2B28-4AF4-B32B-910FE289A845","7.2",{"Operator":15,"Negate":15,"Nodes":239},[240],{"Operator":233,"Negate":15,"CPEMatch":241},[242],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":243,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5FEC7F7E-AA94-4405-93D6-D0194A37D3C9",[],[246,253],{"id":247,"eventType":248,"eventTime":249,"details":250,"label":251,"color":252},"59d10fc2-bc34-4e37-a9ec-69866d79976a","HIGH_EPSS_DELTA","2025-07-31T04:09:41.33014+00:00","Daily EPSS score increased by 0.108 on 2023-12-30","EPSS Score Increased","red",{"id":254,"eventType":255,"eventTime":256,"details":257,"label":258,"color":259},"89a29fe1-126a-44f7-8c36-bd38c22d58c5","LOW_EPSS_DELTA","2025-08-05T04:07:56.109018+00:00","Daily EPSS score decreased by 0.108 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":261,"version":32},1792239552455,{"score":263,"band":264,"action":265,"scoredAt":266},37,"Low","Monitor","2026-10-17T07:56:36.241008+00:00"]