Lucene search
HistoryFeb 14, 2007 - 1:28 a.m.
CVE-2006-5859
cve-2006-5859
cross-site scripting
xss vulnerability
adobe coldfusion
remote attackers
html injection
web script
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.
Affected configurations
Node
adobecoldfusionMatch7.0
ORadobecoldfusionMatch7.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| adobe:coldfusion | adobe coldfusion | eq | 7.0 |
| adobe:coldfusion | adobe coldfusion | eq | 7.0.1 |
Related
cvelist
cvelist
CVE-2006-5859
2007-02-14 01:00:00
jvn
jvn
JVN#28356427 ColdFusion cross-site scripting vulnerability
2007-02-14 00:00:00
nvd
nvd
CVE-2006-5859
2007-02-14 01:28:00
securityvulns
securityvulns
Multiple Macromedia Coldfusion security vulnerabilities
2006-09-13 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2006-5859