CVE-2011-0583

Опубликовано: 10 фев. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag.

Ссылки

http://secunia.com/advisories/43264
http://www.adobe.com/support/security/bulletins/apsb11-04.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/46277
http://www.securitytracker.com/id?1025036
http://www.vupen.com/english/advisories/2011/0334
https://exchange.xforce.ibmcloud.com/vulnerabilities/65279
http://secunia.com/advisories/43264
http://www.adobe.com/support/security/bulletins/apsb11-04.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/46277
http://www.securitytracker.com/id?1025036
http://www.vupen.com/english/advisories/2011/0334
https://exchange.xforce.ibmcloud.com/vulnerabilities/65279

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:8.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01633

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-64gc-rw82-mfm5

github

больше 3 лет назад