{"id":"CVE-2016-8582","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-8582","generatedAt":"2026-10-28T19:03:14.229Z","title":"A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.","description":"A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execute an arbitrary SQL query and retrieve database information or read local system files via MySQL's LOAD_FILE.","published":"2016-10-28T15:59:06.000Z","lastModified":"2026-06-17T00:54:33.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-89"],"affected":["alienvault/open source security information and event management","alienvault/unified security management"],"epss":{"score":0.57425,"percentile":0.99074,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.50127,"percentile":0.98886},{"date":"2026-09-22","score":0.57425,"percentile":0.99035}]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2016-11-02","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":40684,"kind":"exploit","title":"Alienvault OSSIM/USM 5.3.1 - SQL Injection","url":"https://www.exploit-db.com/exploits/40684","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/40684.txt","file":"exploits/php/webapps/40684.txt","published":"2016-11-02","added":"2016-11-02","updated":"2016-11-02","author":"Peter Lapp","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2016-8582"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 57.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-22T00:00:00.000Z","detail":{"to":0.57425,"from":0.50127,"percentile":0.99035},"summary":"EPSS moved from 50.1% to 57.4% probability of exploitation in the next thirty days."}],"references":[{"url":"http://www.securityfocus.com/bid/93866","source":"cve@mitre.org"},{"url":"https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/40684/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/93866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.alienvault.com/forums/discussion/7766/security-advisory-alienvault-5-3-2-address-70-vulnerabilities","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/40684/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-8582","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}