VULNERABILITY INTELLIGENCE

CVE-2016-8580

CVSS score9.8 CRITICAL

EPSS probability6.86%

CISA KEVNot currently listed

Published2016-10-28

Last modified2026-06-17

Description

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.