Medium severity6.1NVD Advisory· Published Aug 8, 2016· Updated Jun 17, 2026

CVE-2016-5331

Description

CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

VMware/Vcenter Server2 versions
cpe:2.3:a:vmware:vcenter_server:*:update_1b:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:vcenter_server:*:update_1b:*:*:*:*:*:*range: <=6.0
- (no CPE)range: <6.0 U2
VMware/Esxi2 versions
cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:vmware:esxi:6.0:*:*:*:*:*:*:*
- (no CPE)range: 6.0

Patches

Vulnerability mechanics

References

www.vmware.com/security/advisories/VMSA-2016-0010.htmlnvdMitigationPatchVendor Advisory
packetstormsecurity.com/files/138211/VMware-vSphere-Hypervisor-ESXi-HTTP-Response-Injection.htmlnvd
seclists.org/fulldisclosure/2016/Aug/38nvd
www.securityfocus.com/archive/1/539128/100/0/threadednvd
www.securityfocus.com/bid/92324nvd
www.securitytracker.com/id/1036543nvd
www.securitytracker.com/id/1036544nvd
www.securitytracker.com/id/1036545nvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000