CVE-2016-5062

highpriority · track · 40EPSS 0.039 · 90 %ileEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.95% (90th) EPSS

CVSS 9.3 · high

Is it mine?

2 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

The web server in Aternity before 9.0.1 does not require authentication for getMBeansFromURL loading of Java MBeans, which allows remote attackers to execute arbitrary Java code by registering MBeans.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9–9.8

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v3.09.8criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.09criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-669USprimary

affected products (2)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
aternity aternity≤ 9.0nvdUScpe:2.3:a:aternity:aternity:*:*:*:*:*:*:*:*

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2016-09-29modified 2026-06-17

related (128)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-31431US	—OT critical	98.1% (100th)	KEV	2026-04-22
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the c…
CVE-2021-22900US	high7.2OT critical	14.1% (97th)	KEV	2021-05-27
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a malici…
CVE-2019-13025US	critical9.8	3.35% (89th)	Exploit	2019-10-02
Compal CH7465LG CH7465LG-NCIP-6.12.18.24-5p8-NOSH devices have Incorrect Access Control because of Improper Input Validation. The attacker can send a maliciously modified POST (HTT…
CVE-2020-1048US	high7.8	16.5% (97th)	Exploit	2020-05-21
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited…
CVE-2020-24683US	critical9.8	1.48% (74th)	—	2020-12-22
The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side authenticat…

+123 more

references (6)

External citations — patches, advisories, analysis.

http://www.kb.cert.org/vuls/id/706359 cnnvd
http://www.securityfocus.com/bid/93208 cnnvd
http://www.kb.cert.org/vuls/id/706359 enisa_euvd
http://www.securityfocus.com/bid/93208 enisa_euvd
http://www.kb.cert.org/vuls/id/706359Third Party AdvisoryUS Government Resourcenvd
http://www.securityfocus.com/bid/93208 nvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan