CVE-2016-9895

MEDIUM · CVSS 6.1 EPSS 1.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-9895

Severity

MEDIUM

CVSS

6.1

EPSS

1.84%

Firefox Java

Original Filing — NVD Description

Event handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP) that disallowed inline JavaScript. This vulnerability affects Firefox < 50.1, Firefox ESR < 45.6, and Thunderbird < 45.6.