CVE-2016-4168: XSS

Published Aug 9, 2016

Updated

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

3 affected components

Adobe Experience Manager=5.6.1

Adobe Experience Manager=6.0.0

Adobe Experience Manager=6.1.0

Remediation

Patch Available

https://helpx.adobe.com/security/products/experience-manager/apsb16-27.html

Event History

Aug 9, 2016

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-4168?

CVE-2016-4168 is classified as a high severity vulnerability due to its potential for remote exploitation.

How do I fix CVE-2016-4168?

To fix CVE-2016-4168, upgrade Adobe Experience Manager to versions 6.1.1 or later, or apply the relevant security patches provided by Adobe.

What software is affected by CVE-2016-4168?

CVE-2016-4168 affects Adobe Experience Manager versions 5.6.1, 6.0.0, and 6.1.0.

Can CVE-2016-4168 be exploited remotely?

Yes, CVE-2016-4168 can be exploited remotely by attackers to inject arbitrary web scripts or HTML into affected systems.

What is the impact of CVE-2016-4168?

The impact of CVE-2016-4168 includes the potential for data theft, session hijacking, and spreading malware through cross-site scripting attacks.