CVE-2016-0955

MEDIUM · 6.1 CVSS Gepubliceerd: 10-02-2016 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in Adobe Experience Manager (AEM) 6.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a folder title field that is mishandled in the Deletion popup dialog.

Vendors

Adobe Apple Linux Microsoft

Affected products

Experience Manager Mac Os X Linux Kernel Windows

References

www.csnc.ch
helpx.adobe.com