CVE-2016-3255

Published: Jul 13, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability."

Affected (6)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.5.2
Microsoft .net Framework	Version 4.6.1
Microsoft .net Framework	Version 4.6