Unscored CVE-2014-0571 EUVD-2014-0602GHSA-px5r-9xvr-xjmj

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before…

Published Oct 15, 2014 · Updated Aug 6, 2024 · Assigned by adobe

Description

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

1031020 vdb-entry
http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html