Vulnerability
CVE-2016-9451
MEDIUM 6.8
CVE-2016-9451 is a medium-severity vulnerability (CVSS v3.0 6.8). As of 2026-10-29, 1 host in our data shows software it affects on an open service.
Confirmation forms in Drupal 7.x before 7.52 make it easier for remote authenticated users to conduct open redirect attacks via unspecified vectors.
- Published
- 2016-11-25
- Last modified
- 2026-06-17
- CVSS score
- 6.8 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
- Exploit likelihood (EPSS)
- 1.5% in the next 30 days (top 26% of CVEs)
Exposure in our data
1 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Counted 2026-10-29 04:21 UTC
By country
| Finland FI | 1 |
Affected software seen
| drupal 7.34 | 1 |