CVEvulnerability
CVE-2016-1036
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-04-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Adobe Analytics AppMeasurement for Flash Library before 4.0.1, when debugTracking is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• adobe analytics appmeasurement for flash library (<= 4.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.securitytracker.com/id/1035671 www.securitytracker.com
- https://helpx.adobe.com/security/products/analytics/apsb16-13.html Vendor Advisory
- http://www.securitytracker.com/id/1035671 www.securitytracker.com
- https://helpx.adobe.com/security/products/analytics/apsb16-13.html Vendor Advisory