CVE-2016-0162 — VulnIntel

CVE-2016-0162

MEDIUM

KEV

KISA

Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

설명

Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

Score Summary

CVSS Score: 4.3
Version: 3.1
VPI: 64.50
Why this VPI (explainable, experimental)
VPI breakdown
Impact 43.00
Exploitation signal(KEV listed) ×1.50
VPI 64.50
VPI formula vpi-v1
EPSS: 22.1%
(상위 97.4%)
Attack Vector: Network
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
Low Confidentiality Impact
No Integrity Impact
No Availability Impact

Details

Published: 04/12/2016(10 years ago)
Modified: 04/21/2026(3 months ago)
Source: KEV, NVD, KISA
Products: 9

CISA KEV Listing

Vendor / Project: Microsoft
Product: Internet Explorer

Date Added: 05/24/2022
Due Date: 06/14/2022Overdue 1499d

Required Action

Apply updates per vendor instructions.

Listed in KISA bulletin

This CVE is referenced in a KISA security bulletin (Korean only).

Bulletin ID: 24165
Published: 2016-04-12

boho.or.kr

Vulnerability Lifecycle

NVDPublished04/12/2016
KISAKISA Listed04/12/2016
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	4.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N	04/20/2026
NVDNIST	2.0	4.3

References (4)

NVD
Third Party Advisory
http://www.securityfocus.com/bid/85939
NVD
Third Party Advisory
http://www.securitytracker.com/id/1035521
NVD
Patch

Affected Products (9)

Impact	43.00
Exploitation signal(KEV listed)	×1.50
VPI	64.50