CVE-2016-6603

PoC ×5—

CVSS 3.0

9.8 critical

EPSS

87%p100

Published

Jan 23, 2017 (Jan 23, 2017)

Modified

Jun 17, 2026

Description

ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP header.

Vendors: zohocorp
Products: webnms framework
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (87.0%)

In the news0 stories

No ingested article mentions this CVE yet.