CVE-2016-2566

CWE-89 — SQL Injection4 documents4 sources
Severity
9.8CRITICAL
EPSS
0.6%
top 31.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Galaxy S6 Firmware
Timeline
PublishedApr 13
Latest updateMay 17

Description

Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDsamsung/galaxy_s6_firmwareg920fxxu2coh2

🔴Vulnerability Details

2
GHSA
GHSA-xrwf-8f3p-hr54: Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081↗2022-05-17
▶
CVEList
CVE-2016-2566: Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081↗2017-04-13
▶

💬Community

1
Bugzilla
CVE-2016-3625 libtiff: out of bounds read in the tiff2bw tool↗2016-04-08
▶
CVE-2016-2566 (CRITICAL CVSS 9.8) | Samsung SecEmailSync on SM-G920F bu | cvebase.io