CVE-2016-6913: Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attac

Q: How do I fix CVE-2016-6913?

open source security information and event management: upgrade to newer than 5.2; unified security management: upgrade to newer than 5.2. Exact commands for each OS are on this page.

Q: Is CVE-2016-6913 being exploited?

CVE-2016-6913 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2016-6913 affect?

CVE-2016-6913 affects open source security information and event management, unified security management. Severity is medium (CVSS 5.4). Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.

Q: How urgent is CVE-2016-6913?

Priority 39/100. Public exploit reference

Routine

MEDIUM 5.4UPGRADEUPGRADE

CVE-2016-6913 is a medium-severity flaw (CVSS 5.4) affecting open source security information and event management, unified security management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.

Why this priority

Public exploit reference

A fixed release or distro patch exists.

Risk facts

CVSS score	5.4 (Medium)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	Required
EPSS exploit chance	0.9% (top 40%)
CISA exploited list	No
Weakness	CWE-79
Published	2016-09-26
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: alienvault

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2016-09-26 16:59 UTCPublished CVE record published
2026-06-17 00:51 UTCUpdated Record last modified

alienvault open source security information and event management UPGRADE

Affected: <= 5.2

Fixed in: newer than 5.2

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy open-source-security-information-and-event-management || rpm -q open-source-security-information-and-event-management || open-source-security-information-and-event-management --version

2. UPGRADE to newer than 5.2 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade open-source-security-information-and-event-management

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade open-source-security-information-and-event-management

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

alienvault unified security management UPGRADE

Affected: <= 5.2

Fixed in: newer than 5.2

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy unified-security-management || rpm -q unified-security-management || unified-security-management --version

2. UPGRADE to newer than 5.2 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade unified-security-management

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade unified-security-management

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2016-6913?

open source security information and event management: upgrade to newer than 5.2; unified security management: upgrade to newer than 5.2. Exact commands for each OS are on this page.

Is CVE-2016-6913 being exploited?

CVE-2016-6913 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2016-6913 affect?

CVE-2016-6913 affects open source security information and event management, unified security management. Severity is medium (CVSS 5.4). Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.php.

How urgent is CVE-2016-6913?

Priority 39/100. Public exploit reference

Software pages

PHP vulnerabilities

Related CVEs

CVE-2016-8583 MEDIUM 6.1 UPGRADE UPGRADE Multiple GET parameters in the vulnerability scan scheduler of AlienVault OSSIM and USM before 5.3.2 are vulne
CVE-2016-8582 CRITICAL 9.8 UPGRADE UPGRADE A vulnerability exists in gauge.php of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to execut
CVE-2016-8581 MEDIUM 6.1 UPGRADE UPGRADE A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and US
CVE-2016-8580 CRITICAL 9.8 UPGRADE UPGRADE PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2

References

← Back to latest CVEs