CVE-2016-9012

High

Published: 23/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle.

Risk Assessment

Access to internal configuration mechanisms may lead to unauthorized changes in the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update CloudVision Portal to version 2016.1.2.1 or later to mitigate this vulnerability.

Other vulnerabilities in CloudVision Portal

CVE-2026-101153High
On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS