CVE-2016-0956

7.5 HIGH

Published: February 10, 2016 Modified: May 06, 2026

Description

The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspecified vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html

Source: psirt@adobe.com

http://seclists.org/fulldisclosure/2016/Feb/48

Source: psirt@adobe.com

http://www.securityfocus.com/archive/1/537498/100/0/threaded

Source: psirt@adobe.com

https://helpx.adobe.com/security/products/experience-manager/apsb16-05.html

Source: psirt@adobe.com

Patch Vendor Advisory

https://www.exploit-db.com/exploits/39435/

Source: psirt@adobe.com

http://packetstormsecurity.com/files/135720/Apache-Sling-Framework-2.3.6-Information-Disclosure.html