Vulnerability Details CVE-2016-9449
The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.7%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2016-9449
-
cpe:2.3:a:drupal:drupal:7.0
-
cpe:2.3:a:drupal:drupal:7.1
-
cpe:2.3:a:drupal:drupal:7.10
-
cpe:2.3:a:drupal:drupal:7.11
-
cpe:2.3:a:drupal:drupal:7.12
-
cpe:2.3:a:drupal:drupal:7.13
-
cpe:2.3:a:drupal:drupal:7.14
-
cpe:2.3:a:drupal:drupal:7.15
-
cpe:2.3:a:drupal:drupal:7.16
-
cpe:2.3:a:drupal:drupal:7.17
-
cpe:2.3:a:drupal:drupal:7.18
-
cpe:2.3:a:drupal:drupal:7.19
-
cpe:2.3:a:drupal:drupal:7.2
-
cpe:2.3:a:drupal:drupal:7.20
-
cpe:2.3:a:drupal:drupal:7.21
-
cpe:2.3:a:drupal:drupal:7.22
-
cpe:2.3:a:drupal:drupal:7.23
-
cpe:2.3:a:drupal:drupal:7.24
-
cpe:2.3:a:drupal:drupal:7.25
-
cpe:2.3:a:drupal:drupal:7.26
-
cpe:2.3:a:drupal:drupal:7.27
-
cpe:2.3:a:drupal:drupal:7.28
-
cpe:2.3:a:drupal:drupal:7.29
-
cpe:2.3:a:drupal:drupal:7.3
-
cpe:2.3:a:drupal:drupal:7.30
-
cpe:2.3:a:drupal:drupal:7.31
-
cpe:2.3:a:drupal:drupal:7.32
-
cpe:2.3:a:drupal:drupal:7.33
-
cpe:2.3:a:drupal:drupal:7.34
-
cpe:2.3:a:drupal:drupal:7.35
-
cpe:2.3:a:drupal:drupal:7.36
-
cpe:2.3:a:drupal:drupal:7.37
-
cpe:2.3:a:drupal:drupal:7.38
-
cpe:2.3:a:drupal:drupal:7.4
-
cpe:2.3:a:drupal:drupal:7.40
-
cpe:2.3:a:drupal:drupal:7.41
-
cpe:2.3:a:drupal:drupal:7.42
-
cpe:2.3:a:drupal:drupal:7.43
-
cpe:2.3:a:drupal:drupal:7.44
-
cpe:2.3:a:drupal:drupal:7.50
-
cpe:2.3:a:drupal:drupal:7.51
-
cpe:2.3:a:drupal:drupal:8.0.0
-
cpe:2.3:a:drupal:drupal:8.0.1
-
cpe:2.3:a:drupal:drupal:8.0.2
-
cpe:2.3:a:drupal:drupal:8.0.3
-
cpe:2.3:a:drupal:drupal:8.0.4
-
cpe:2.3:a:drupal:drupal:8.0.5
-
cpe:2.3:a:drupal:drupal:8.0.6
-
cpe:2.3:a:drupal:drupal:8.1.0
-
cpe:2.3:a:drupal:drupal:8.1.1
-
cpe:2.3:a:drupal:drupal:8.1.10
-
cpe:2.3:a:drupal:drupal:8.1.2
-
cpe:2.3:a:drupal:drupal:8.1.3
-
cpe:2.3:a:drupal:drupal:8.1.4
-
cpe:2.3:a:drupal:drupal:8.1.5
-
cpe:2.3:a:drupal:drupal:8.1.6
-
cpe:2.3:a:drupal:drupal:8.1.7
-
cpe:2.3:a:drupal:drupal:8.1.8
-
cpe:2.3:a:drupal:drupal:8.1.9
-
cpe:2.3:a:drupal:drupal:8.2.0
-
cpe:2.3:a:drupal:drupal:8.2.1
-
cpe:2.3:a:drupal:drupal:8.2.2