[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9OD31ibFLGMjHWlYt26DPlOfMvSMW2ilKQ-HzLPzTXk":3,"g5a-risk:CVE-2016-3720":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":53,"weaknesses":62,"weaknessesCount":66,"isActivelyExploited":67,"cisaInfo":27,"otxData":27,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":109,"notableEvents":110},"CVE-2016-3720","What is CVE-2016-3720?","XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.","XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecifi...","2016-06-10T15:59:04.297","2025-04-12T10:46:40.837",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.0278,[39,39,39,39,39,39,39],"Critical",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"fedoraproject","fedora","24","cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"fasterxml","jackson-dataformat-xml","*","cpe:2.3:a:fasterxml:jackson-dataformat-xml:*:*:*:*:*:*:*:*",2,[55,60],{"url":56,"source":57,"tags":58},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2016-May\u002F184561.html","Fedoraproject",[59],"Third Party Advisory",{"url":56,"source":57,"tags":61},[59],[63],{"id":64,"name":64,"description":65},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2016-3720? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-3720, a critical severity cyber security vulnerability from 2016. XML external entity (XXE) vulnerability in XmlMapper in ...","CVE-2016-3720, CVE-2016-3720 vulnerability, CVE-2016-3720 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, fedoraproject security, fasterxml security, fedora vulnerability, jackson-dataformat-xml vulnerability","\u002Fwhat-is\u002Fcve-2016-3720",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-3720","Cybersecurity","CVE-2016-3720, CVE-2016-3720 vulnerability, CVE-2016-3720 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95,102],{"Operator":27,"Negate":27,"Nodes":96},[97],{"Operator":98,"Negate":27,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":101,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C729D5D1-ED95-443A-9F53-5D7C2FD9B80C",{"Operator":27,"Negate":27,"Nodes":103},[104],{"Operator":98,"Negate":27,"CPEMatch":105},[106],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":108},"AA1524B9-D0D5-4689-BCF3-7A3F5ED8D03F","2.7.3",[],[],{"lastModified":11,"cacheTime":112,"version":33},1792267532503,{"score":114,"band":115,"action":116,"scoredAt":117},56,"Medium","Plan remediation","2026-10-17T07:57:35.807133+00:00"]