VDB

CVE-2016-1000004

CVE-2016-1000004 PUBLISHED

Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 (inclusive), and all versions between 3.13.0 and 3.14.1 (inclusive).

EPSS 0.19% · 40.7th percentile

Risk Scores

EPSS Score
0.19%
40.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTShhvm0, 3.11.0+dfsg-1, 3.11.1+dfsg-1

Timeline

  • Feb 19, 2020 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›