{"id":"CVE-2016-5786","aliases":["EUVD-2016-6721","GHSA-8fx2-2j9c-7g3v"],"status":"published","title":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application...","description":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01633,"percentile":0.76405,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-02-13T21:00:00Z","modified":"2026-06-17T00:50:02Z","products":[{"vendor":"omnimetrix","product":"omniview"}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-350-02","tags":["x_refsource_MISC","x_transferred","Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/94937","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5786"},{"url":"https://github.com/advisories/GHSA-8fx2-2j9c-7g3v"}],"sources":{"cve":[{"id":"CVE-2016-5786","description":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.","status":"published","published":"2017-02-13T21:00:00Z","modified":"2024-08-06T01:15:10.69Z","updated_at":"2026-11-02T14:33:30.767029Z"}],"euvd":[{"id":"EUVD-2016-6721","description":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.","status":"published","published":"2017-02-13T21:00:00Z","modified":"2024-08-06T01:15:10Z","updated_at":"2026-11-03T02:22:41.580609Z"}],"ghsa":[{"id":"GHSA-8fx2-2j9c-7g3v","title":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application...","description":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.","status":"published","published":"2022-05-17T02:58:54Z","modified":"2023-01-27T05:06:59Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:01.786793Z"}],"nvd":[{"id":"CVE-2016-5786","description":"An issue was discovered in OmniMetrix OmniView, Version 1.2. The OmniView web application transmits credentials with the HTTP protocol, which could be sniffed by an attacker that may result in the compromise of account credentials.","status":"published","published":"2017-02-13T21:59:00.22Z","modified":"2026-06-17T00:50:02.153Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:35.822579Z"}]}}
