VULNERABILITY INTELLIGENCE

CVE-2016-6189

CVSS score4.3 MEDIUM

EPSS probability1.41%

CISA KEVNot currently listed

Published2017-02-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.

Weakness classification

CWE-184: Incomplete List of Disallowed Inputs

Primary references

cve@mitre.org — Mailing List, VDB Entry
cve@mitre.org — Patch
cve@mitre.org — Patch
cve@mitre.org — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory