Vulnerability record · CVE-2016-1319 · published 9 February 2016

CVE-2016-1319: Sun opensolaris information exposure vulnerability

Sun · Opensolaris

Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Service 10.5(2); Unified Contact Center Express 11.0(1); and Unity Connection 10.5(2) store a cleartext encryption key, which allows local users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuv85958.

5.3 CVSS 3.0 Medium EPSS 0.83% · top 43.9% CWE-200 · Information exposure

5.3CVSS 3.0 base score, v2 5.0

0.83%EPSS exploitation probability, 30 days

NoNot in CISA KEV

4Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

X14j Firmware Samsung

Opensolaris Sun

Gs1900 10hp Firmware Zyxel ZKeymouse Firmware Zzinc

References

Link	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm	Vendor Advisory
http://www.securitytracker.com/id/1034958
http://www.securitytracker.com/id/1034959
http://www.securitytracker.com/id/1034960
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160208-ucm	Vendor Advisory
http://www.securitytracker.com/id/1034958
http://www.securitytracker.com/id/1034959
http://www.securitytracker.com/id/1034960

Track CVE-2016-1319 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2026-7273Zyxel gs1900-8 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-base…KEVEPSS 2.5%16 Jun 2026 8.8CVE-2016-1010Adobe Flash Player and AIR integer overflow allows code executionAdobe Flash Player, AIR, AIR SDK and AIR SDK & Compiler contain an integer overflow (CWE-190) that permits arbitrary code execution via unspecified v…KEVEPSS 19%analysed12 Mar 2016 10.0CVE-2009-2296Sun opensolaris vulnerabilityThe NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows r…EPSS 4.4%2 Jul 2009 10.0CVE-2008-5010Sun opensolaris vulnerabilityin.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service…EPSS 4.8%10 Nov 2008 9.8CVE-2019-15800Zyxel gs1900-8 firmware os command injection vulnerabilityAn issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Due to lack of input validation in the cmd_sys_traceroute_exec()…EPSS 3.9%14 Nov 2019 9.8CVE-2015-5729Samsung nt14u firmware information exposure vulnerabilityThe Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, whi…EPSS 5.0%23 Mar 2017 9.8CVE-2016-0729Samsung x14j firmware memory buffer overflow vulnerabilityMultiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C be…EPSS 9.1%7 Apr 2016 9.8CVE-2016-1291Cisco evolved programmable network manager improper input validation vulnerabilityCisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary…EPSS 6.8%6 Apr 2016

Source: NIST National Vulnerability Database (record CVE-2016-1319), CISA KEV, FIRST EPSS (scores of 2026-10-06). This page is refreshed as NVD updates the record.