CVE-2016-6933: XSS

Published Dec 15, 2016

Updated

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.

Affected Software

5 affected components

Adobe Experience Manager=6.0.0

Adobe Experience Manager=6.1.0

Adobe Experience Manager=6.2.0

Adobe LiveCycle=10.0.4

Adobe LiveCycle=11.0.1

Remediation

Patch Available

https://helpx.adobe.com/security/products/aem-forms/apsb16-40.html

Event History

Dec 15, 2016

CVE Published

via MITRE·06:31 AM

Data Sourced

via MITRE·06:31 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-6933?

CVE-2016-6933 has a medium severity rating due to its potential for exploitation in cross-site scripting attacks.

How do I fix CVE-2016-6933?

To remediate CVE-2016-6933, update Adobe Experience Manager Forms to a version later than 6.2 and LiveCycle to a later version than 11.0.1.

What impact can CVE-2016-6933 have on my system?

CVE-2016-6933 can potentially allow attackers to execute malicious scripts in the context of a user's browser session.

Which versions are affected by CVE-2016-6933?

CVE-2016-6933 affects Adobe Experience Manager Forms versions 6.2 and earlier, and LiveCycle versions 11.0.1 and 10.0.4.

Is CVE-2016-6933 a common vulnerability?

CVE-2016-6933 is not uncommon as input validation issues are frequently found in web applications, highlighting the need for proper security measures.