[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWKqooWizd8X-5KvhiPoTKzF1aBbx2Lom5f1mOuQXmdk":3,"g5a-risk:CVE-2016-9299":191},{"success":4,"data":5,"meta":189},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":52,"references":53,"referencesCount":116,"weaknesses":117,"weaknessesCount":126,"isActivelyExploited":127,"cisaInfo":15,"otxData":15,"relatedBlogPosts":128,"seoMetadata":129,"configurations":154,"relatedVendorCves":173,"notableEvents":174},"CVE-2016-9299","What is CVE-2016-9299?","The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.","The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, whic...","2017-01-12T23:59:00.527","2025-04-20T01:37:25.86",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.96943,[39,39,39,39,39,39,39],"Critical",[43,47],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"jenkins","*","cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"fedoraproject","fedora","25","cpe:2.3:o:fedoraproject:fedora:25:*:*:*:*:*:*:*",2,[54,60,63,68,72,76,79,83,88,92,96,98,100,102,104,106,108,110,112,114],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F11\u002F12\u002F4","Openwall",[58,59],"Mailing List","Third Party Advisory",{"url":61,"source":56,"tags":62},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2016\u002F11\u002F14\u002F9",[58,59],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F94281","Securityfocus",[59,67],"VDB Entry",{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.slideshare.net\u002Fcodewhitesec\u002Fjava-deserialization-vulnerabilities-the-forgotten-bug-class-deepsec-edition","Slideshare",[59],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21original\u002Fjenkinsci-advisories\u002F-fc-w9tNEJE\u002FGRvEzWoJBgAJ","Google",[],{"url":77,"source":74,"tags":78},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21original\u002Fjenkinsci-advisories\u002F-fc-w9tNEJE\u002FLZ7EOS0fBgAJ",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FZW2KUKYLNLVDB7STLHLYALCUFLEGCRM6\u002F","Fedoraproject",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Fwiki.jenkins-ci.org\u002Fdisplay\u002FSECURITY\u002FJenkins+Security+Advisory+2016-11-16","Jenkins-ci",[87],"Vendor Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fwww.cloudbees.com\u002Fjenkins-security-advisory-2016-11-16","Cloudbees",[87],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F44642\u002F","Exploit-db",[59,67],{"url":55,"source":56,"tags":97},[58,59],{"url":61,"source":56,"tags":99},[58,59],{"url":64,"source":65,"tags":101},[59,67],{"url":69,"source":70,"tags":103},[59],{"url":73,"source":74,"tags":105},[],{"url":77,"source":74,"tags":107},[],{"url":80,"source":81,"tags":109},[],{"url":84,"source":85,"tags":111},[87],{"url":89,"source":90,"tags":113},[87],{"url":93,"source":94,"tags":115},[59,67],20,[118],{"id":119,"name":120,"description":121,"extendedDescription":122,"status":123,"abstraction":124,"structure":125},"CWE-90","Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')","The product constructs all or part of an LDAP query using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended LDAP query when it is sent to a downstream component.","","Draft","Base","Simple",1,false,[],{"title":130,"metaDescription":131,"keywords":132,"canonicalUrl":133,"structuredData":134},"What is CVE-2016-9299? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2016-9299, a critical severity cyber security vulnerability from 2017. High exploit probability (96.9%). The remoting module in...","CVE-2016-9299, CVE-2016-9299 vulnerability, CVE-2016-9299 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, jenkins security, fedoraproject security, jenkins vulnerability, fedora vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2016-9299",{"@context":135,"@type":136,"headline":130,"description":131,"datePublished":10,"dateModified":11,"author":137,"publisher":141,"about":145,"mainEntityOfPage":149,"articleSection":152,"keywords":153},"https:\u002F\u002Fschema.org","TechArticle",{"@type":138,"name":139,"url":140},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":138,"name":139,"url":140,"logo":142},{"@type":143,"url":144},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":146,"name":6,"description":147,"additionalType":148},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":150,"@id":151},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2016-9299","Cybersecurity","CVE-2016-9299, CVE-2016-9299 vulnerability, CVE-2016-9299 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[155,167],{"Operator":15,"Negate":15,"Nodes":156},[157],{"Operator":158,"Negate":15,"CPEMatch":159},"OR",[160,163],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":162},"C85414B7-4C07-49C3-BD78-17A3A681F48D","2.19.2",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":166},"cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*","C94D8097-3E9E-4245-AA35-CCEAF14BE898","2.31",{"Operator":15,"Negate":15,"Nodes":168},[169],{"Operator":158,"Negate":15,"CPEMatch":170},[171],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"772E9557-A371-4664-AE2D-4135AAEB89AA",[],[175,182],{"id":176,"eventType":177,"eventTime":178,"details":179,"label":180,"color":181},"a393fb69-8dd8-4879-ae57-3f3e7ff1ef77","LOW_EPSS_DELTA","2025-05-14T01:15:35.18226+00:00","Daily EPSS score decreased by 0.258 on 2023-12-30","EPSS Score Decreased","green",{"id":183,"eventType":184,"eventTime":185,"details":186,"label":187,"color":188},"3db58b2f-5296-44f3-8a99-8c08c9fe82b0","HIGH_EPSS_DELTA","2025-08-06T04:06:05.391962+00:00","Daily EPSS score increased by 0.111 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":190,"version":33},1792265646789,{"score":192,"band":193,"action":194,"scoredAt":195},80,"High","Patch now","2026-10-17T08:26:04.460886+00:00"]