{"cve_id":"CVE-2016-3718","published":"2016-05-05T18:59:08.960000+00:00","last_modified":"2026-06-17T00:46:15.097000+00:00","vuln_status":"Analyzed","description":"The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","base_score":5.5,"base_severity":"MEDIUM","attack_vector":"LOCAL","privileges_req":"NONE","user_interaction":"REQUIRED","scope":"UNCHANGED","impact_c":"NONE","impact_i":"HIGH","impact_a":"NONE","cwe_ids":["CWE-918"],"in_kev":true,"kev_date_added":"2021-11-03","kev_ransomware":false,"epss_score":0.7565,"epss_percentile":0.99521,"cap_rule_version":"0.1.1","stage":"RECON","req_access":"NONE","req_vector":"LOCAL","req_user_interaction":true,"grant_access":"NONE","caps":["INFO_DISCLOSURE","LATERAL","TAMPER"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:28:11.439711+00:00","first_seen":"2016-05-05T18:59:08.960000+00:00","kev_first_seen":"2021-11-03T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","imagemagick","opensuse","oracle","redhat","suse"],"products":["enterprise_linux_desktop","enterprise_linux_eus","enterprise_linux_for_ibm_z_systems","enterprise_linux_for_ibm_z_systems_eus","enterprise_linux_for_power_big_endian","enterprise_linux_for_power_big_endian_eus","enterprise_linux_for_power_little_endian","enterprise_linux_for_power_little_endian_eus","enterprise_linux_hpc_node","enterprise_linux_hpc_node_eus","enterprise_linux_server","enterprise_linux_server_aus","enterprise_linux_server_from_rhui","enterprise_linux_server_supplementary_eus","enterprise_linux_server_tus","enterprise_linux_workstation","imagemagick","leap","linux","linux_enterprise_debuginfo","linux_enterprise_desktop","linux_enterprise_server","linux_enterprise_software_development_kit","linux_enterprise_workstation_extension","manager","manager_proxy","openstack_cloud","opensuse","solaris","ubuntu_linux"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["14.04","15.10","16.04","12.04"]},{"vendor":"imagemagick","product":"imagemagick","ranges":["7.0.0-0","7.0.1-0","< 6.9.3-10"]},{"vendor":"opensuse","product":"leap","ranges":["42.1"]},{"vendor":"opensuse","product":"opensuse","ranges":["13.2"]},{"vendor":"oracle","product":"linux","ranges":["6","7"]},{"vendor":"oracle","product":"solaris","ranges":["10","11.3"]},{"vendor":"redhat","product":"enterprise_linux_desktop","ranges":["7.0","6.0"]},{"vendor":"redhat","product":"enterprise_linux_eus","ranges":["7.4","6.7","7.2","7.3","7.5","7.6","7.7"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems","ranges":["7.0_s390x","6.0_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_ibm_z_systems_eus","ranges":["7.6_s390x","7.7_s390x","7.3_s390x","7.5_s390x","7.2_s390x","7.4_s390x","6.7_s390x"]},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian","ranges":["7.0_ppc64","6.0_ppc64"]},{"vendor":"redhat","product":"enterprise_linux_for_power_big_endian_eus","ranges":["7.2_ppc64","7.3_ppc64","7.4_ppc64","7.5_ppc64","7.6_ppc64","7.7_ppc64","6.7_ppc64"]},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian","ranges":["7.0_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_for_power_little_endian_eus","ranges":["7.5_ppc64le","7.4_ppc64le","7.3_ppc64le","7.2_ppc64le","7.7_ppc64le","7.6_ppc64le"]},{"vendor":"redhat","product":"enterprise_linux_hpc_node","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_hpc_node_eus","ranges":["7.2"]},{"vendor":"redhat","product":"enterprise_linux_server","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_server_aus","ranges":["7.3","7.7","7.6","7.4","7.2"]},{"vendor":"redhat","product":"enterprise_linux_server_from_rhui","ranges":["6.0","7.0"]},{"vendor":"redhat","product":"enterprise_linux_server_supplementary_eus","ranges":["6.7z"]},{"vendor":"redhat","product":"enterprise_linux_server_tus","ranges":["7.2","7.6","7.3","7.7"]},{"vendor":"redhat","product":"enterprise_linux_workstation","ranges":["6.0","7.0"]},{"vendor":"suse","product":"linux_enterprise_debuginfo","ranges":["11"]},{"vendor":"suse","product":"linux_enterprise_desktop","ranges":["12"]},{"vendor":"suse","product":"linux_enterprise_server","ranges":["12","11"]},{"vendor":"suse","product":"linux_enterprise_software_development_kit","ranges":["12","11"]},{"vendor":"suse","product":"linux_enterprise_workstation_extension","ranges":["12"]},{"vendor":"suse","product":"manager","ranges":["2.1"]},{"vendor":"suse","product":"manager_proxy","ranges":["2.1"]},{"vendor":"suse","product":"openstack_cloud","ranges":["5"]}]}