Adobe Patch Tuesday, August 2016: the CVEs

Adobe Patch Tuesday August 2016: the CVEs Adobe published on 9 August 2016, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Microsoft, SAP. Earlier: Jul 2016, Jun 2016, May 2016, Apr 2016, Mar 2016, Feb 2016, Jan 2016, Dec 2015, Nov 2015, Oct 2015, Sep 2015, Aug 2015. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 5.3CVE-2016-4253EPSS 2.8%2016-08-09

   The Backup functionality in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows attackers to obtain sensitive information via unspecified vectors.

2. 6.1CVE-2016-4170EPSS 1.7%2016-08-09

   Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, 6.1, and 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

3. 5.3CVE-2016-4169EPSS 2.8%2016-08-09

   Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors.

4. 6.1CVE-2016-4168EPSS 1.7%2016-08-09

   Cross-site scripting (XSS) vulnerability in Adobe Experience Manager 5.6.1, 6.0, and 6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.