CVE-2016-6586

Katalog CVE

CVSS 3.7 · Low EPSS 1,3%

Kerentanan Improper Input Validation pada symantec norton mobile security. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist.

Rincian

Terbit di NVD

8 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.symantec.com/us/en/article.symsa1384.html advisory vendor
• http://www.securityfocus.com/bid/93901 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037225 advisory pihak ketiga · vdb entry