Strix
26.1K

CVE-2016-0713

UnknownEPSS 0.54%

Last modified

CVE-2016-0713 is a vulnerability of currently unknown severity. Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.

Metrics

EPSS Probability
0.54%

41.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CloudfoundryCf-Release141
CloudfoundryCf-Release142
CloudfoundryCf-Release143
CloudfoundryCf-Release144
CloudfoundryCf-Release145
CloudfoundryCf-Release146
CloudfoundryCf-Release147
CloudfoundryCf-Release148
CloudfoundryCf-Release149
CloudfoundryCf-Release150
CloudfoundryCf-Release151
CloudfoundryCf-Release152
CloudfoundryCf-Release153
CloudfoundryCf-Release154
CloudfoundryCf-Release155
CloudfoundryCf-Release156
CloudfoundryCf-Release157
CloudfoundryCf-Release158
CloudfoundryCf-Release159
CloudfoundryCf-Release160
CloudfoundryCf-Release161
CloudfoundryCf-Release162
CloudfoundryCf-Release163
CloudfoundryCf-Release164
CloudfoundryCf-Release165
CloudfoundryCf-Release166
CloudfoundryCf-Release167
CloudfoundryCf-Release168
CloudfoundryCf-Release169
CloudfoundryCf-Release170
CloudfoundryCf-Release171
CloudfoundryCf-Release172
CloudfoundryCf-Release173
CloudfoundryCf-Release174
CloudfoundryCf-Release175
CloudfoundryCf-Release176
CloudfoundryCf-Release177
CloudfoundryCf-Release178
CloudfoundryCf-Release179
CloudfoundryCf-Release180
CloudfoundryCf-Release181
CloudfoundryCf-Release182
CloudfoundryCf-Release183
CloudfoundryCf-Release184
CloudfoundryCf-Release185
CloudfoundryCf-Release186
CloudfoundryCf-Release187
CloudfoundryCf-Release188
CloudfoundryCf-Release189
CloudfoundryCf-Release190

Showing 50 of 88 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-0713?
Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests.
How severe is CVE-2016-0713?
Severity scoring for CVE-2016-0713 is pending analysis. The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.
How do I fix CVE-2016-0713?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-0713?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST