CVE-2016-1607: Novell Filr

High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.

Affected products

• Novell Filr: up to and including 1.2; up to and including 2.0

Published 2016-08-01. Last modified 2026-06-17.