CVE-2016-6933 Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.
MediumCVSS 6.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe experience manager | = 6.0.0 | No fix listed |
| Adobe experience manager | = 6.1.0 | No fix listed |
| Adobe experience manager | = 6.2.0 | No fix listed |
| Adobe livecycle | = 10.0.4 | No fix listed |
| Adobe livecycle | = 11.0.1 | No fix listed |
References
- 94867 vdb-entry
- 1037465 vdb-entry
- helpx.adobe.com patch third-party-advisory