{
  "cveId": "CVE-2016-4216",
  "url": "https://patchblox.com/security/cve/CVE-2016-4216",
  "summary": "CVE-2016-4216 is fixed in libxmpcore-java on 1 platform, first by libxmpcore-java 5.1.3-1, released July 12, 2016. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libxmpcore-java: XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackersto read arbitrary files via XML data contai...",
  "description": "XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackersto read arbitrary files via XML data containing an external entitydeclaration in conjunction with an entity reference, related to an XMLExternal Entity (XXE) issue.",
  "published": "2016-07-12T19:00:00Z",
  "severity": "Medium",
  "epss": 0.03631,
  "epssPercentile": 0.89591,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libxmpcore-java-5.1.3-1",
      "released": "2016-07-12T19:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libxmpcore-java-5.1.3-1",
      "released": "2016-07-12T19:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 24.04.5 LTS (noble)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-noble-libxmpcore-java-5.1.3-1",
      "released": "2016-07-12T19:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libxmpcore-java-5.1.3-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libxmpcore-java-5.1.3-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 25.10 (questing)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-questing-libxmpcore-java-5.1.3-1",
      "released": "2016-07-12T19:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libxmpcore-java",
      "release": "Ubuntu 26.04.1 LTS (resolute)",
      "fixedVersion": "5.1.3-1",
      "fix": "libxmpcore-java 5.1.3-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-resolute-libxmpcore-java-5.1.3-1",
      "released": "2016-07-12T19:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}