Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2016-6933

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.

Published: Dec 15, 2016
Updated: Nov 9, 2025
CVE: CVE-2016-6933
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
adobe / experience_manager	6.0.0	6.0.0.x
adobe / experience_manager	6.1.0	6.1.0.x
adobe / experience_manager	6.2.0	6.2.0.x
adobe / livecycle	11.0.1	11.0.1.x
adobe / livecycle	10.0.4	10.0.4.x

http://www.securityfocus.com/bid/94867
http://www.securitytracker.com/id/1037465
https://helpx.adobe.com/security/products/aem-forms/apsb16-40.html

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo