CVE-2016-0957

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass…

published February 10, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 98.9th percentile for exploit probability.

CVSS
—
EPSS
52%
Percentile
98.9
In the wild
Unconfirmed
What it is

Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass dispatcher rules via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.51989 · 98.9th percentile
Published
2016-02-10T20:00Z
EPSS history
Timeline
  • 22 SEP 03:12Z
    EPSS moved 52% → 37%
    epss
  • 06 SEP 03:09Z
    EPSS moved 52% → 37%
    epss
  • 30 AUG 15:30Z
    EPSS moved 37% → 52%
    epss
  • 29 AUG 04:08Z
    EPSS moved 52% → 37%
    epss
  • 10 FEB 20:00Z
    Dispatcher before 4.1.5 in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 does not properly implement a URL filter, which allows remote attackers to bypass…
    cvelistv5