AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2016-8638

CRITICAL · CVSS 9.1 EPSS 2.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-07-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2016-8638
Severity
CRITICAL
CVSS
9.1
EPSS
2.12%

Original Filing — NVD Description

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active sessions from other users. It is also called a "SAML2 multi-session vulnerability."