VULNERABILITY INTELLIGENCE

CVE-2016-6497

CVSS score7.5 HIGH

EPSS probability5.73%

CISA KEVNot currently listed

Published2017-01-18

Last modified2026-06-17

Description

main/java/org/apache/directory/groovyldap/LDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.