[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSkvBRaPJUe98C-ciOUx4xP7LYPfi_OqdQpPTHlikJF8":3,"g5a-risk:CVE-2016-6497":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":26,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":39,"weaknesses":88,"weaknessesCount":52,"isActivelyExploited":41,"cisaInfo":26,"otxData":26,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":126,"notableEvents":127},"CVE-2016-6497","What is CVE-2016-6497?","main\u002Fjava\u002Forg\u002Fapache\u002Fdirectory\u002Fgroovyldap\u002FLDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods.","main\u002Fjava\u002Forg\u002Fapache\u002Fdirectory\u002Fgroovyldap\u002FLDAP.java in the Groovy LDAP API in Apache allows attackers to conduct LDAP entry poisoning attacks by leveraging s...","2017-01-18T22:59:00.86","2026-06-17T00:51:16.54",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":42},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":41,"ObtainAllPrivilege":41,"ObtainUserPrivilege":41,"ObtainOtherPrivilege":41,"UserInteractionRequired":41},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":37,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"","MEDIUM",10,2.9,false,[],0.05729,[43,43,43,43,43,43,43],"High",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"apache","groovy_ldap","*","cpe:2.3:a:apache:groovy_ldap:*:*:*:*:*:*:*:*",1,[54,60,65,68,73,78,80,82,84,86],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fsvn.apache.org\u002Fviewvc\u002Fdirectory\u002Fsandbox\u002Fszoerner\u002Fgroovyldap\u002Fsrc\u002Fmain\u002Fjava\u002Forg\u002Fapache\u002Fdirectory\u002Fgroovyldap\u002FLDAP.java?r1=1765362&r2=1765361&pathrev=1765362&view=patch","Apache",[58,59],"Mailing List","Third Party Advisory",{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F95929","Securityfocus",[59,64],"VDB Entry",{"url":66,"source":56,"tags":67},"https:\u002F\u002Fmail-archives.apache.org\u002Fmod_mbox\u002Fdirectory-users\u002F201610.mbox\u002F%3Cb7d7e909-a8ed-1ab4-c853-4078c1e7624a%40stefan-seelmann.de%3E",[58,59],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.blackhat.com\u002Fdocs\u002Fus-16\u002Fmaterials\u002Fus-16-Munoz-A-Journey-From-JNDI-LDAP-Manipulation-To-RCE-wp.pdf","Blackhat",[72,59],"Technical Description",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujul2019-5072835.html","Oracle",[77],"Patch",{"url":55,"source":56,"tags":79},[58,59],{"url":61,"source":62,"tags":81},[59,64],{"url":66,"source":56,"tags":83},[58,59],{"url":69,"source":70,"tags":85},[72,59],{"url":74,"source":75,"tags":87},[77],[89],{"id":90,"name":90,"description":91},"Unknown","CWE-254",[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2016-6497? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-6497, a high severity cyber security vulnerability from 2017. main\u002Fjava\u002Forg\u002Fapache\u002Fdirectory\u002Fgroovyldap\u002FLDAP.java in the G...","CVE-2016-6497, CVE-2016-6497 vulnerability, CVE-2016-6497 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, apache security, groovy_ldap vulnerability","\u002Fwhat-is\u002Fcve-2016-6497",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-6497","Cybersecurity","CVE-2016-6497, CVE-2016-6497 vulnerability, CVE-2016-6497 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":122,"Negate":41,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E5CF5C13-FB9B-4021-96E5-F908E3B6C37F",[],[],{"lastModified":11,"cacheTime":129,"version":33},1793205265917,{"score":131,"band":132,"action":133,"scoredAt":134},47,"Medium","Plan remediation","2026-07-01T10:20:09.746913+00:00"]