Adobe ColdFusion Multiple Vulnerabilities
Last Update Date:
25 Feb 2025
Release Date:
26 Apr 2017
6538
Views
RISK: Extremely High Risk
TYPE: Web services - Web Servers
Multiple vulnerabilities were identified in Adobe ColdFusion. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, cross-site scripting and data manipulation on the targeted system.
Note:
A XSS (cross-site scripting) vulnerability has been identified in Adobe ColdFusion .
A java deserialization vulnerability has been identified in Adobe ColdFusion .
Impact
- Cross-Site Scripting
- Data Manipulation
- Remote Code Execution
System / Technologies affected
- ColdFusion (2016 release) Update 3 and earlier versions
- ColdFusion 11 Update 11 and earlier versions
- ColdFusion 10 Update 22 and earlier versions
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to ColdFusion (2016 release) Update 4 or later
- Update to ColdFusion 11 Update 12 or later
- Update to ColdFusion 10 Update 23 or later
Vulnerability Identifier
Source
Related Link
Share with