Exploited Vulnerabilities DailyCVE-2016-3718: ImageMagick ImageMagick
EPSS76.7%No. 661 of 1739 in KEV
CVE year2016~5 yrs before listing
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | ImageMagick |
| Product | ImageMagick |
| Name | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2016-3714 | ImageMagick ImageMagick | 2024-09-09 | 97.4% | Unknown |
| CVE-2016-3715 | ImageMagick ImageMagick | 2021-11-03 | 75.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A ImageMagick ImageMagick vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.