2 matches found
CVE-2016-2833
Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...
6.1CVSS6.8AI score0.01372EPSS
SaveExploits0References6
CVE-2016-2833: Improper Neutralization of Input During Web Page Generation
Mozilla Firefox before 47.0 ignores Content Security Policy CSP directives for cross-domain Java applets, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted applet...
6.1CVSS7AI score0.01372EPSS
SaveExploits0References3
20