CVE-2016-6152

HIGH 8.8CVE-2016-6152 · Published 26/07/2016 · updated 17/06/2026

In short

CVE-2016-6152 is a HIGH (CVSS 8.8) vulnerability affecting ehealth (broadcom), ehealth (ca).
Chance of exploitation in the next 30 days (EPSS): 3.4%, higher than 88.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ehealth broadcom	`= 6.3= 6.3.1= 6.3.2= 6.3.2.01= 6.3.2.02= 6.3.2.03= 6.3.2.04= 6.3.2.05= 6.3.2.06= 6.3.2.07= 6.3.2.08= 6.3.2.09= 6.3.2.10= 6.3.2.11= 6.3.2.12`	No fix yet
ehealth ca	`= 6.2= 6.2.1= 6.2.2`	No fix yet

Description

CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote authenticated users to cause a denial of service or possibly execute arbitrary commands via unspecified vectors.

References

ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20160721-01-security-notice-for-ca-ehealth.aspx · Patch
securityfocus.com/bid/92107
securitytracker.com/id/1036433

More vulnerabilities in ehealth

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free