vulnerability

Apple Safari security update for CVE-2016-4651

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jul 21, 2016
Added
Dec 5, 2016
Modified
Aug 11, 2025

Description

A cross-protocol cross-site scripting (XPXSS) issue existed in Safari when submitting forms to non-HTTP services compatible with HTTP/0.9. This issue was addressed by disabling scripts and plugins on resources loaded over HTTP/0.9.

Solutions

apple-safari-upgrade-9_1_2apple-safari-windows-uninstall
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.