First published: Tue May 03 2016(Updated: )
Cross-site scripting (XSS) vulnerability in EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
EMC RSA Data Loss Prevention | =9.6 | |
EMC RSA Data Loss Prevention | =9.6.1 | |
EMC RSA Data Loss Prevention | =9.6.2 | |
EMC RSA Data Loss Prevention | =9.6.2.1 | |
EMC RSA Data Loss Prevention | =9.6.2.2 | |
EMC RSA Data Loss Prevention | =9.6.2.3 | |
EMC RSA Data Loss Prevention | =9.6.2.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-0892 is classified as a cross-site scripting (XSS) vulnerability, which can be exploited by attackers to inject malicious scripts.
To fix CVE-2016-0892, you should upgrade EMC RSA Data Loss Prevention to version 9.6 SP2 P5 or later.
CVE-2016-0892 affects EMC RSA Data Loss Prevention versions 9.6, 9.6.1, and from 9.6.2 to 9.6.2.4.
CVE-2016-0892 allows remote attackers to execute arbitrary web scripts or HTML in the context of the affected application.
There are no specific workarounds for CVE-2016-0892, and the best mitigation is to apply the necessary software updates.