CVE-2016-4170: XSS
Published Aug 9, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
4 affected components
Adobe Experience Manager=5.6.1
Adobe Experience Manager=6.0.0
Adobe Experience Manager=6.1.0
Adobe Experience Manager=6.2.0
Remediation
Event History
Aug 9, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4170?
CVE-2016-4170 is a critical severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2016-4170?
To fix CVE-2016-4170, update Adobe Experience Manager to the latest patched version.
3
What versions of Adobe Experience Manager are affected by CVE-2016-4170?
CVE-2016-4170 affects Adobe Experience Manager versions 5.6.1, 6.0, 6.1, and 6.2.
4
What type of vulnerability is CVE-2016-4170?
CVE-2016-4170 is categorized as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2016-4170 be exploited remotely?
Yes, CVE-2016-4170 can be exploited by remote attackers to inject arbitrary web scripts or HTML.