PT-2016-3014

CVE-2016-7280

·

Published

2016-12-13

·

Updated

2018-10-12

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Microsoft Edge (affected versions not specified)
Description The issue exists due to inadequate protection of the web page structure in Microsoft Edge, allowing a remote attacker to inject arbitrary web or HTML code via unspecified vectors. This is related to a cross-site scripting (XSS) vulnerability. Information disclosure vulnerabilities are present when Microsoft Browsers do not properly validate content under specific conditions, potentially leading to arbitrary code execution and information disclosure.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾