CVE-2016-3171

HIGH · CVSS 8.1 EPSS 3.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-04-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-3171

Severity

HIGH

CVSS

8.1

EPSS

3.19%

Original NVD Description

Drupal 6.x before 6.38, when used with PHP before 5.4.45, 5.5.x before 5.5.29, or 5.6.x before 5.6.13, might allow remote attackers to execute arbitrary code via vectors related to session data truncation.