CVE-2016-5331

CVE-2016-5331 describes a CRLF injection vulnerability affecting VMware vCenter Server 6.0 before U2 and ESXi 6.0. This flaw allows remote attackers to inject arbitrary HTTP headers, potentially leading to HTTP response splitting attacks. With a CVSS v3 score of 6.1 (MEDIUM), the vulnerability has a network attack vector and low attack complexity, requiring user interaction and potentially impacting confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received minimal community discussion and media coverage.