Lucene search
HistoryAug 18, 2009 - 10:30 p.m.
CVE-2009-1877
cve-2009-1877
cross-site scripting
xss
adobe coldfusion
vulnerability
remote attackers
web script
html
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.192 Low
EPSS
Percentile
96.3%
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.
Affected configurations
Node
adobecoldfusionRange≤8.0.1
ORadobecoldfusionMatch6.0
ORadobecoldfusionMatch6.0enterprise_multi-server
ORadobecoldfusionMatch6.0enterprise_server
ORadobecoldfusionMatch6.0linux
ORadobecoldfusionMatch6.0solaris
ORadobecoldfusionMatch6.1
ORadobecoldfusionMatch6.1enterprise_multi-server
ORadobecoldfusionMatch6.1enterprise_server
ORadobecoldfusionMatch6.1linux
ORadobecoldfusionMatch6.1solaris
ORadobecoldfusionMatch7.0
ORadobecoldfusionMatch7.0enterprise_multi-server
ORadobecoldfusionMatch7.0enterprise_server
ORadobecoldfusionMatch7.0linux
ORadobecoldfusionMatch7.0solaris
ORadobecoldfusionMatch7.0.1
ORadobecoldfusionMatch7.0.2
ORadobecoldfusionMatch7.2unknownmx
ORadobecoldfusionMatch8.0
ORadobecoldfusionMatch8.1
Related
cvelist
cvelist
CVE-2009-1877
2009-08-18 22:00:00
CVE-2009-1875
2009-08-18 22:00:00
prion
prion
Cross site scripting
2009-08-18 22:30:00
Cross site scripting
2009-08-18 22:30:00
cve
cve
CVE-2009-1875
2009-08-18 22:30:00
nvd
nvd
CVE-2009-1875
2009-08-18 22:30:00
CVE-2009-1877
2009-08-18 22:30:00
checkpoint_advisories
checkpoint_advisories
jvn
jvn
JVN#21388501 ColdFusion vulnerable to cross-site scripting
2009-08-19 00:00:00
nessus
nessus
Adobe ColdFusion <= 8.0.1 _logintowizard.cfm XSS
2009-11-02 00:00:00
5.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.192 Low
EPSS
Percentile
96.3%
Related for CVE-2009-1877