CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-3168

The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file download vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.9%

CVSS Severity

CVSS v3 Score 6.4

CVSS v2 Score 8.5

References

Products affected by CVE-2016-3168

Drupal » Drupal » Version: 6.0

cpe:2.3:a:drupal:drupal:6.0
Drupal » Drupal » Version: 6.1

cpe:2.3:a:drupal:drupal:6.1
Drupal » Drupal » Version: 6.10

cpe:2.3:a:drupal:drupal:6.10
Drupal » Drupal » Version: 6.11

cpe:2.3:a:drupal:drupal:6.11
Drupal » Drupal » Version: 6.12

cpe:2.3:a:drupal:drupal:6.12
Drupal » Drupal » Version: 6.13

cpe:2.3:a:drupal:drupal:6.13
Drupal » Drupal » Version: 6.14

cpe:2.3:a:drupal:drupal:6.14
Drupal » Drupal » Version: 6.15

cpe:2.3:a:drupal:drupal:6.15
Drupal » Drupal » Version: 6.16

cpe:2.3:a:drupal:drupal:6.16
Drupal » Drupal » Version: 6.17

cpe:2.3:a:drupal:drupal:6.17
Drupal » Drupal » Version: 6.18

cpe:2.3:a:drupal:drupal:6.18
Drupal » Drupal » Version: 6.19

cpe:2.3:a:drupal:drupal:6.19
Drupal » Drupal » Version: 6.2

cpe:2.3:a:drupal:drupal:6.2
Drupal » Drupal » Version: 6.20

cpe:2.3:a:drupal:drupal:6.20
Drupal » Drupal » Version: 6.21

cpe:2.3:a:drupal:drupal:6.21
Drupal » Drupal » Version: 6.22

cpe:2.3:a:drupal:drupal:6.22
Drupal » Drupal » Version: 6.23

cpe:2.3:a:drupal:drupal:6.23
Drupal » Drupal » Version: 6.24

cpe:2.3:a:drupal:drupal:6.24
Drupal » Drupal » Version: 6.25

cpe:2.3:a:drupal:drupal:6.25
Drupal » Drupal » Version: 6.26

cpe:2.3:a:drupal:drupal:6.26
Drupal » Drupal » Version: 6.27

cpe:2.3:a:drupal:drupal:6.27
Drupal » Drupal » Version: 6.28

cpe:2.3:a:drupal:drupal:6.28
Drupal » Drupal » Version: 6.29

cpe:2.3:a:drupal:drupal:6.29
Drupal » Drupal » Version: 6.3

cpe:2.3:a:drupal:drupal:6.3
Drupal » Drupal » Version: 6.30

cpe:2.3:a:drupal:drupal:6.30
Drupal » Drupal » Version: 6.31

cpe:2.3:a:drupal:drupal:6.31
Drupal » Drupal » Version: 6.32

cpe:2.3:a:drupal:drupal:6.32
Drupal » Drupal » Version: 6.33

cpe:2.3:a:drupal:drupal:6.33
Drupal » Drupal » Version: 6.34

cpe:2.3:a:drupal:drupal:6.34
Drupal » Drupal » Version: 6.35

cpe:2.3:a:drupal:drupal:6.35
Drupal » Drupal » Version: 6.36

cpe:2.3:a:drupal:drupal:6.36
Drupal » Drupal » Version: 6.37

cpe:2.3:a:drupal:drupal:6.37
Drupal » Drupal » Version: 6.4

cpe:2.3:a:drupal:drupal:6.4
Drupal » Drupal » Version: 6.5

cpe:2.3:a:drupal:drupal:6.5
Drupal » Drupal » Version: 6.6

cpe:2.3:a:drupal:drupal:6.6
Drupal » Drupal » Version: 6.7

cpe:2.3:a:drupal:drupal:6.7
Drupal » Drupal » Version: 6.8

cpe:2.3:a:drupal:drupal:6.8
Drupal » Drupal » Version: 6.9

cpe:2.3:a:drupal:drupal:6.9
Drupal » Drupal » Version: 7.0

cpe:2.3:a:drupal:drupal:7.0
Drupal » Drupal » Version: 7.1

cpe:2.3:a:drupal:drupal:7.1
Drupal » Drupal » Version: 7.10

cpe:2.3:a:drupal:drupal:7.10
Drupal » Drupal » Version: 7.11

cpe:2.3:a:drupal:drupal:7.11
Drupal » Drupal » Version: 7.12

cpe:2.3:a:drupal:drupal:7.12
Drupal » Drupal » Version: 7.13

cpe:2.3:a:drupal:drupal:7.13
Drupal » Drupal » Version: 7.14

cpe:2.3:a:drupal:drupal:7.14
Drupal » Drupal » Version: 7.15

cpe:2.3:a:drupal:drupal:7.15
Drupal » Drupal » Version: 7.16

cpe:2.3:a:drupal:drupal:7.16
Drupal » Drupal » Version: 7.17

cpe:2.3:a:drupal:drupal:7.17
Drupal » Drupal » Version: 7.18

cpe:2.3:a:drupal:drupal:7.18
Drupal » Drupal » Version: 7.19

cpe:2.3:a:drupal:drupal:7.19
Drupal » Drupal » Version: 7.2

cpe:2.3:a:drupal:drupal:7.2
Drupal » Drupal » Version: 7.20

cpe:2.3:a:drupal:drupal:7.20
Drupal » Drupal » Version: 7.21

cpe:2.3:a:drupal:drupal:7.21
Drupal » Drupal » Version: 7.22

cpe:2.3:a:drupal:drupal:7.22
Drupal » Drupal » Version: 7.23

cpe:2.3:a:drupal:drupal:7.23
Drupal » Drupal » Version: 7.24

cpe:2.3:a:drupal:drupal:7.24
Drupal » Drupal » Version: 7.25

cpe:2.3:a:drupal:drupal:7.25
Drupal » Drupal » Version: 7.26

cpe:2.3:a:drupal:drupal:7.26
Drupal » Drupal » Version: 7.27

cpe:2.3:a:drupal:drupal:7.27
Drupal » Drupal » Version: 7.28

cpe:2.3:a:drupal:drupal:7.28
Drupal » Drupal » Version: 7.29

cpe:2.3:a:drupal:drupal:7.29
Drupal » Drupal » Version: 7.3

cpe:2.3:a:drupal:drupal:7.3
Drupal » Drupal » Version: 7.30

cpe:2.3:a:drupal:drupal:7.30
Drupal » Drupal » Version: 7.31

cpe:2.3:a:drupal:drupal:7.31
Drupal » Drupal » Version: 7.32

cpe:2.3:a:drupal:drupal:7.32
Drupal » Drupal » Version: 7.33

cpe:2.3:a:drupal:drupal:7.33
Drupal » Drupal » Version: 7.34

cpe:2.3:a:drupal:drupal:7.34
Drupal » Drupal » Version: 7.35

cpe:2.3:a:drupal:drupal:7.35
Drupal » Drupal » Version: 7.36

cpe:2.3:a:drupal:drupal:7.36
Drupal » Drupal » Version: 7.37

cpe:2.3:a:drupal:drupal:7.37
Drupal » Drupal » Version: 7.38

cpe:2.3:a:drupal:drupal:7.38
Drupal » Drupal » Version: 7.4

cpe:2.3:a:drupal:drupal:7.4
Drupal » Drupal » Version: 7.40

cpe:2.3:a:drupal:drupal:7.40
Drupal » Drupal » Version: 7.41

cpe:2.3:a:drupal:drupal:7.41
Drupal » Drupal » Version: 7.42

cpe:2.3:a:drupal:drupal:7.42
Drupal » Drupal » Version: 7.5

cpe:2.3:a:drupal:drupal:7.5
Drupal » Drupal » Version: 7.6

cpe:2.3:a:drupal:drupal:7.6
Drupal » Drupal » Version: 7.7

cpe:2.3:a:drupal:drupal:7.7
Drupal » Drupal » Version: 7.8

cpe:2.3:a:drupal:drupal:7.8
Drupal » Drupal » Version: 7.9

cpe:2.3:a:drupal:drupal:7.9
Drupal » Drupal » Version: 7.x-dev

cpe:2.3:a:drupal:drupal:7.x-dev
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-3168

Products

Pricing

Contact Us