NVD

Id
19083  
Name
CVE-2016-3255  
Description
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-07-12  
Modified Date
2016-11-28  
Seq
2016-3255  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
105702 19083 CVE-2016-3255 MS16-091  View
105703 19083 CVE-2016-3255 91601  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2866 JVNDB-2016-003639 Microsoft .NET Framework における任意のファイルを読まれる脆弱性 Microsoft .NET Framework には、任意のファイルを読まれる脆弱性が存在します。 CVE-2016-3255 89761 CVE-2016-3255 19083 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003639.html 2016-07-12 2016-07-15 View