PT-2016-5866 · Adobe · Xmp Toolkit For Java

CVE-2016-4216

·

Published

2016-07-13

·

Updated

2026-02-13

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Adobe XMP Toolkit for Java versions prior to 5.1.3
Description The issue allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Recommendations For versions prior to 5.1.3, update to version 5.1.3 or later to resolve the issue.

Fix

XXE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2016-4216
GHSA-QV32-7R6P-XHHH
OESA-2026-1319
OESA-2026-1366
OESA-2026-1367
OESA-2026-1368
OESA-2026-1369
OESA-2026-1370

Affected Products

Xmp Toolkit For Java