CVE Vulnerabilities

CVE-2016-9081

Published: Jan 23, 2017 | Modified: Apr 20, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Joomla! 3.4.4 through 3.6.3 allows attackers to reset username, password, and user group assignments and possibly perform other user account modifications via unspecified vectors.

Affected Software

NameVendorStart VersionEnd Version
Joomla!Joomla3.4.4 (including)3.4.4 (including)
Joomla!Joomla3.4.5 (including)3.4.5 (including)
Joomla!Joomla3.4.6 (including)3.4.6 (including)
Joomla!Joomla3.4.7 (including)3.4.7 (including)
Joomla!Joomla3.4.8 (including)3.4.8 (including)
Joomla!Joomla3.4.8-rc (including)3.4.8-rc (including)
Joomla!Joomla3.5.0 (including)3.5.0 (including)
Joomla!Joomla3.5.0-beta (including)3.5.0-beta (including)
Joomla!Joomla3.5.0-beta2 (including)3.5.0-beta2 (including)
Joomla!Joomla3.5.0-beta3 (including)3.5.0-beta3 (including)
Joomla!Joomla3.5.0-beta4 (including)3.5.0-beta4 (including)
Joomla!Joomla3.5.0-beta5 (including)3.5.0-beta5 (including)
Joomla!Joomla3.5.0-rc (including)3.5.0-rc (including)
Joomla!Joomla3.5.0-rc2 (including)3.5.0-rc2 (including)
Joomla!Joomla3.5.0-rc3 (including)3.5.0-rc3 (including)
Joomla!Joomla3.5.0-rc4 (including)3.5.0-rc4 (including)
Joomla!Joomla3.5.1 (including)3.5.1 (including)
Joomla!Joomla3.5.1-rc (including)3.5.1-rc (including)
Joomla!Joomla3.5.1-rc2 (including)3.5.1-rc2 (including)
Joomla!Joomla3.6.0 (including)3.6.0 (including)
Joomla!Joomla3.6.0-alpha (including)3.6.0-alpha (including)
Joomla!Joomla3.6.0-beta1 (including)3.6.0-beta1 (including)
Joomla!Joomla3.6.0-beta2 (including)3.6.0-beta2 (including)
Joomla!Joomla3.6.0-rc (including)3.6.0-rc (including)
Joomla!Joomla3.6.0-rc2 (including)3.6.0-rc2 (including)
Joomla!Joomla3.6.1 (including)3.6.1 (including)
Joomla!Joomla3.6.1-rc1 (including)3.6.1-rc1 (including)
Joomla!Joomla3.6.1-rc2 (including)3.6.1-rc2 (including)
Joomla!Joomla3.6.2 (including)3.6.2 (including)
Joomla!Joomla3.6.3 (including)3.6.3 (including)
Joomla!Joomla3.6.3-rc1 (including)3.6.3-rc1 (including)
Joomla!Joomla3.6.3-rc2 (including)3.6.3-rc2 (including)
Joomla!Joomla3.6.3-rc3 (including)3.6.3-rc3 (including)

References