Medium severity6.1NVD Advisory· Published Aug 9, 2016· Updated Jun 17, 2026
CVE-2016-4168
CVE-2016-4168
Description
Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
4cpe:2.3:a:adobe:experience_manager:5.6.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:adobe:experience_manager:5.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:experience_manager:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:experience_manager:6.1.0:*:*:*:*:*:*:*
- (no CPE)range: 5.6.1, 6.0, 6.1
Patches
Vulnerability mechanics
References
3- helpx.adobe.com/security/products/experience-manager/apsb16-27.htmlnvdMitigationPatchVendor Advisory
- www.securityfocus.com/bid/92377nvd
- www.securitytracker.com/id/1036563nvd
News mentions
0No linked articles in our index yet.