PT-2016-7412 · Adobe · Experience Manager

Publicado 2016-12-15 · Atualizado 2016-12-22 · CVE-2016-7882

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.2 and earlier

Description The issue is related to an input validation problem in the WCMDebug filter, which could be exploited for cross-site scripting attacks.

Recommendations For Adobe Experience Manager versions 6.2 and earlier, update to a version that addresses the input validation issue in the WCMDebug filter to prevent cross-site scripting attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-7882

Produtos afetados

Experience Manager

Referências · 5

• http://securityfocus.com/bid/94869 · Nota
• https://osv.dev/vulnerability/CVE-2016-7882 · Aviso do Fabricante
• https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html · Aviso do Fabricante
• http://securitytracker.com/id/1037464 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7882 · Nota de Segurança