CVE-2016-5062

CRITICAL · CVSS 9.8 EPSS 3.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-29 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-5062

Severity

CRITICAL

CVSS

9.8

EPSS

3.93%

Java

Original NVD Description

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.