Lucene search
Veracode Vulnerability DatabaseVERACODE:5515HistoryDec 01, 2017 - 8:29 a.m.
XML External Entity (XXE)
2017-12-0108:29:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.003
Percentile
71.6%
Adobe xmpcore is vulnerable to XML external entity (XXE) attacks. The attacks are possible because it does not properly handle the XML data containing an external entity declaration in conjunction with an entity reference, allowing users to read arbitrary files.
Related
cvelist
cvelist
CVE-2016-4216
2016-07-13 01:00:00
gitlab
gitlab
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
2018-10-19 00:00:00
nvd
nvd
CVE-2016-4216
2016-07-13 02:00:24
osv
osv
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
2018-10-19 16:39:29
cve
cve
CVE-2016-4216
2016-07-13 02:00:24
prion
prion
Xxe
2016-07-13 02:00:00
ubuntucve
ubuntucve
CVE-2016-4216
2016-07-13 00:00:00
github
github
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
2018-10-19 16:39:29
adobe
adobe
APSB16-24 Security Update available for Adobe XMP Toolkit for Java
2016-07-12 00:00:00
redhatcve
redhatcve
CVE-2016-4216
2017-12-11 17:49:48