CVE-2016-6933: Adobe Experience Manager

Medium severity, CVSS 6.1. EPSS: 2% chance of exploitation in the next 30 days.

Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.

Affected products

• Adobe Experience Manager: version 6.0.0 only; version 6.1.0 only; version 6.2.0 only
• Adobe Livecycle: version 10.0.4 only; version 11.0.1 only

Published 2016-12-15. Last modified 2026-06-17.