NVD

Id
19918  
Name
CVE-2016-4216  
Description
XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-07-12  
Modified Date
2016-11-28  
Seq
2016-4216  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
108942 19918 CVE-2016-4216 91717  View
108943 19918 CVE-2016-4216 https://helpx.adobe.com/security/products/xmpcore/apsb16-24.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2902 JVNDB-2016-003675 Adobe XMP Toolkit for Java の XMPCore における任意のファイルを読まれる脆弱性 Adobe XMP Toolkit for Java の XMPCore には、任意のファイルを読まれる脆弱性が存在します。 CVE-2016-4216 90722 CVE-2016-4216 19918 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003675.html 2016-07-12 2016-07-15 View