CVE-2016-2403

CRITICAL · CVSS 9.8 EPSS 2.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-02-07 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE

CVE-2016-2403

Severity

CRITICAL

CVSS

9.8

EPSS

2.93%

Original NVD Description

Symfony before 2.8.6 and 3.x before 3.0.6 allows remote attackers to bypass authentication by logging in with an empty password and valid username, which triggers an unauthenticated bind.