AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-7955

CRITICAL · CVSS 9.8 EPSS 6.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-03-15 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable.

CVE
CVE-2016-7955
Severity
CRITICAL
CVSS
9.8
EPSS
6.41%

Original NVD Description

The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header.