CVE-2016-0895: Input Validation
Published May 3, 2016
·Updated
EMC RSA Data Loss Prevention 9.6 before SP2 P5 allows remote attackers to conduct clickjacking attacks via web-site elements with crafted transparency or opacity.
Affected Software
7 affected components
EMC RSA Data Loss Prevention=9.6
EMC RSA Data Loss Prevention=9.6.1
EMC RSA Data Loss Prevention=9.6.2
EMC RSA Data Loss Prevention=9.6.2.1
EMC RSA Data Loss Prevention=9.6.2.2
EMC RSA Data Loss Prevention=9.6.2.3
EMC RSA Data Loss Prevention=9.6.2.4
Event History
May 3, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-0895?
CVE-2016-0895 is considered to have a moderate severity level, as it allows remote clickjacking attacks.
2
How do I fix CVE-2016-0895?
To fix CVE-2016-0895, update EMC RSA Data Loss Prevention to version 9.6 SP2 P5 or later.
3
What versions are affected by CVE-2016-0895?
CVE-2016-0895 affects EMC RSA Data Loss Prevention versions 9.6, 9.6.1, and 9.6.2 up to 9.6.2.4.
4
Who can exploit CVE-2016-0895?
CVE-2016-0895 can be exploited by remote attackers who utilize crafted transparency or opacity in web-site elements.
5
What type of attack does CVE-2016-0895 facilitate?
CVE-2016-0895 facilitates clickjacking attacks, enabling attackers to trick users into clicking on malicious elements.