PatchTheCVECVE-2016-5073: CloudView NMS before 2.10a has XSS via SNMP.
39
Routine
MEDIUM 6.1UPGRADE
CVE-2016-5073 is a medium-severity flaw (CVSS 6.1) affecting cloudview nms. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
CloudView NMS before 2.10a has XSS via SNMP.
Why this priority
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.1 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.7% (top 49%) |
| CISA exploited list | No |
| Weakness | CWE-79 |
| Published | 2017-04-10 |
| Last modified | 2026-06-17 |
Publisher (CNA): CERT/CC · Vendor: cloudviewnms
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
cloudviewnms cloudview nms UPGRADE
Affected: <= 2.09b
Fixed in: newer than 2.09b
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy cloudview-nms || rpm -q cloudview-nms || cloudview-nms --version
2. UPGRADE to newer than 2.09b (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade cloudview-nms
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade cloudview-nms
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2016-5073?
cloudview nms: upgrade to newer than 2.09b. Exact commands for each OS are on this page.
Is CVE-2016-5073 being exploited?
CVE-2016-5073 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2016-5073 affect?
CVE-2016-5073 affects cloudview nms. Severity is medium (CVSS 6.1). CloudView NMS before 2.10a has XSS via SNMP.
How urgent is CVE-2016-5073?
Priority 39/100. Public exploit reference
Related CVEs
- CVE-2016-5076 HIGH 7.5 UPGRADE CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for ad
- CVE-2016-5075 MEDIUM 6.1 UPGRADE CloudView NMS before 2.10a has XSS via a TELNET login.
- CVE-2016-5074 CRITICAL 9.8 UPGRADE CloudView NMS before 2.10a has a format string issue exploitable over SNMP.