[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frrAiokAF3dBge977rvKCvLQyj9gsiDfc7y63kXa_FD8":3,"g5a-risk:CVE-2016-0891":142},{"success":4,"data":5,"meta":140},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":28,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":53,"references":54,"referencesCount":93,"weaknesses":94,"weaknessesCount":53,"isActivelyExploited":42,"cisaInfo":28,"otxData":28,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":138,"notableEvents":139},"CVE-2016-0891","What is CVE-2016-0891?","Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators.","Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentica...","2016-04-20T17:59:00.15","2026-06-17T00:38:25.293",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":43},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":27,"IntegrityImpact":27,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,2.8,5.9,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":36,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":4},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":36,"Authentication":24,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,"",8.6,6.4,false,[],0.0361,[44,44,44,44,44,44,44],"High",[48],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"emc","vipr_srm","*","cpe:2.3:a:emc:vipr_srm:*:*:*:*:*:*:*:*",1,[55,62,66,69,73,77,81,83,85,87,89,91],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F136837\u002FEMC-ViPR-SRM-Cross-Site-Request-Forgery.html","Packetstormsecurity",[59,60,61],"Exploit","Third Party Advisory","VDB Entry",{"url":63,"source":64,"tags":65},"http:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2016\u002FApr\u002F106","Seclists",[60,61],{"url":67,"source":64,"tags":68},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2016\u002FApr\u002F89",[60,61],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F538207\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39738\u002F","Exploit-db",[59,60,61],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.securify.nl\u002Fadvisory\u002FSFY20141109\u002Femc_m_r__watch4net__lacks_c%20ross_site_request_forgery_protection.html","Securify",[59,60,61],{"url":56,"source":57,"tags":82},[59,60,61],{"url":63,"source":64,"tags":84},[60,61],{"url":67,"source":64,"tags":86},[60,61],{"url":70,"source":71,"tags":88},[],{"url":74,"source":75,"tags":90},[59,60,61],{"url":78,"source":79,"tags":92},[59,60,61],12,[95],{"id":96,"name":97,"description":98,"extendedDescription":99,"status":100,"abstraction":101,"structure":102},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2016-0891? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-0891, a high severity cyber security vulnerability from 2016. Multiple cross-site request forgery (CSRF) vulnerabilities i...","CVE-2016-0891, CVE-2016-0891 vulnerability, CVE-2016-0891 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, emc security, vipr_srm vulnerability","\u002Fwhat-is\u002Fcve-2016-0891",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-0891","Cybersecurity","CVE-2016-0891, CVE-2016-0891 vulnerability, CVE-2016-0891 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130],{"Operator":28,"Negate":28,"Nodes":131},[132],{"Operator":133,"Negate":42,"CPEMatch":134},"OR",[135],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":136,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":137},"5BA1447F-A2BA-41CD-93D7-A22776318347","3.6.4",[],[],{"lastModified":11,"cacheTime":141,"version":34},1793200160413,{"score":143,"band":144,"action":145,"scoredAt":146},51,"Medium","Plan remediation","2026-07-01T10:19:48.938298+00:00"]