CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Android. It may be remotely exploitable.
CVE
CVE-2016-1155
Severity
CRITICAL
CVSS
9.8
EPSS
1.80%
Android
Original NVD Description
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
Related CVEs
Other vulnerabilities affecting the same vendor(s)