CVE-2016-6933
No fix known EPSS 2%
Adobe Experience Manager Forms versions 6.2 and earlier, LiveCycle 11.0.1, LiveCycle 10.0.4 have an input validation issue in the AACComponent that could be used in cross-site scripting attacks.
Products: adobe experience_manager, adobe livecycle