Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2016-5331

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

  • Published: Aug 8, 2016
  • Updated: Nov 9, 2025
  • CVE: CVE-2016-5331
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
vmware / esxi 6.0 6.0.x
vmware / vcenter_server - 6.0.x