CVE-2016-5062

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

• CWE-669

• http://www.kb.cert.org/vuls/id/706359Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/93208
• http://www.kb.cert.org/vuls/id/706359Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/93208

Published

Sep 29, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5056OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses onl…
• CVE-2016-5057OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does no…
• CVE-2016-5058OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows …
• CVE-2016-5059OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows a…
• CVE-2016-5060Multiple cross-site scripting (XSS) vulnerabilities in nGrin…
• CVE-2016-5061Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2016-5063The RSCD agent in BMC Server Automation before 8.6 SP1 Patch…
• CVE-2016-5065Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 all…
• CVE-2016-5066Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 hav…
• CVE-2016-5067Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 all…
• CVE-2016-5068Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do …
• CVE-2016-5069Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use…