High severity7.5NVD Advisory· Published Jul 13, 2016· Updated May 6, 2026
CVE-2016-4216
CVE-2016-4216
Description
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
com.adobe.xmp:xmpcoreMaven | < 5.1.3 | 5.1.3 |
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- helpx.adobe.com/security/products/xmpcore/apsb16-24.htmlnvdPatchVendor AdvisoryWEB
- github.com/advisories/GHSA-qv32-7r6p-xhhhghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2016-4216ghsaADVISORY
- www.securityfocus.com/bid/91717nvdWEB
News mentions
0No linked articles in our index yet.