CVE-2016-6217: XSS
Published Jan 26, 2018
·Updated
Cross-site scripting (XSS) vulnerability in Sophos PureMessage for UNIX before 6.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
Sophos PureMessage<6.3.2
Linux Linux kernel
Event History
Jan 26, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6217?
CVE-2016-6217 has a medium severity rating due to its potential for remote exploitation via cross-site scripting.
2
How do I fix CVE-2016-6217?
To fix CVE-2016-6217, upgrade Sophos PureMessage for UNIX to version 6.3.2 or later.
3
What versions of Sophos PureMessage are affected by CVE-2016-6217?
CVE-2016-6217 affects all versions of Sophos PureMessage for UNIX prior to 6.3.2.
4
Can CVE-2016-6217 be exploited remotely?
Yes, CVE-2016-6217 can be exploited remotely, allowing attackers to inject arbitrary web scripts.
5
Is the Linux Kernel affected by CVE-2016-6217?
No, the Linux Kernel itself is not affected by CVE-2016-6217.