CVE-2016-4618

Description

Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka Universal XSS (UXSS).

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.5

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Apple Safari 9.1.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 9.1.3Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234