Critical severity9.8NVD Advisory· Published Oct 28, 2016· Updated Jun 17, 2026

CVE-2016-8580

Description

PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic methods in included classes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alienvault/Open Source Security Information And Event Management
cpe:2.3:a:alienvault:open_source_security_information_and_event_management:*:*:*:*:*:*:*:*
Range: <=5.3.1
Alienvault/Unified Security Management
cpe:2.3:a:alienvault:unified_security_management:*:*:*:*:*:*:*:*
Range: <=5.3.1
Alienvault/Ossimllm-fuzzy
Range: <5.3.2
Alienvault/USMllm-fuzzy
Range: <5.3.2

Patches

Vulnerability mechanics

References

www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilitiesnvdVendor Advisory
www.securityfocus.com/bid/93864nvd
www.exploit-db.com/exploits/40682/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000