Lucene search

K
redhatcveRedhat.comRH:CVE-2016-9895
HistoryDec 14, 2016 - 4:48 a.m.

CVE-2016-9895

2016-12-1404:48:11
redhat.com
access.redhat.com
5

0.002 Low

EPSS

Percentile

60.0%

Event handlers on “marquee” elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.