CVE-2016-1593 is a directory traversal vulnerability affecting Micro Focus Novell Service Desk versions prior to 7.2. It allows remote authenticated administrators to upload and execute arbitrary JSP files by manipulating filenames in multipart/form-data POST requests. This vulnerability has a CVSS v3 score of 7.2 (High), indicating a high-impact threat. The attack vector is network-based with low attack complexity, requiring high privileges for exploitation, and can lead to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, exploit code is publicly available, including a Metasploit module and ExploitDB entries. Despite this, there is no evidence of active exploitation, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 7.1CPE matchmatch criteria | cpe:2.3:a:novell:service_desk:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.