PT-2016-7414 · Adobe · Experience Manager

Publicado 2016-12-15 · Atualizado 2016-12-22 · CVE-2016-7884

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 and earlier

Description The issue is related to an input validation problem in the DAM create assets, which could be exploited for cross-site scripting attacks.

Recommendations For Adobe Experience Manager versions 6.1 and earlier, update to a version later than 6.1 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-7884

Produtos afetados

Experience Manager

Referências · 5

• http://securityfocus.com/bid/94869 · Nota
• https://helpx.adobe.com/security/products/experience-manager/apsb16-42.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7884 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-7884 · Aviso do Fabricante
• http://securitytracker.com/id/1037464 · Nota