CVE-2016-10552
Resources Downloaded over Insecure Protocol in igniteui
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
CVE-2016-10552- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-311, CWE-254
- Updated
- 2026-11-02
CVE List No score
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
CVE-2016-10552- Weakness
- CWE-311
- Updated
- 2026-11-02
EUVDEUVD-2019-0203 No score
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
EUVD-2019-0203- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2r5h-gh4x-8hp9 No score
Resources Downloaded over Insecure Protocol in igniteui
Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection.
Recommendation
The igniteui package has been deprecated by the package author and now exists under ignite-ui, which should be used in place of this package.
- Record
GHSA-2r5h-gh4x-8hp9- Weakness
- CWE-311
- Updated
- 2026-11-02
OSVGHSA-2r5h-gh4x-8hp9 No score
Resources Downloaded over Insecure Protocol in igniteui
Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection.
Recommendation
The igniteui package has been deprecated by the package author and now exists under ignite-ui, which should be used in place of this package.
- Record
GHSA-2r5h-gh4x-8hp9- Weakness
- CWE-311
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
igniteuinpm |
through 0.0.5 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-10552 is a high vulnerability (CVSS 7.4) in Infragistics Igniteui, published May 31, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. No source names a fixed version.