cvedb.io
CVE-2016-5331
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2016-08-08T01:59:17.477 · Last modified 2026-06-17T00:49:13.613

Summary

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected products

vmware — vcenter_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when vmware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.