Lucene search

[email protected]CVE-2011-0734

HistoryFeb 01, 2011 - 6:00 p.m.

CVE-2011-0734

2011-02-0118:00:03

CWE-79

[email protected]

web.nvd.nist.gov

cve-2011-0734

xss

adobe coldfusion

security vulnerability

web script injection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a “tag body” attack. NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier.

Affected configurations

NVD

Node

adobecoldfusionRange≤9.0.1chf1

adobecoldfusionMatch4.5

adobecoldfusionMatch5.0

adobecoldfusionMatch6.0

adobecoldfusionMatch6.1

adobecoldfusionMatch7.0

adobecoldfusionMatch7.0.1

adobecoldfusionMatch7.0.2

adobecoldfusionMatch8.0

adobecoldfusionMatch8.0.1

adobecoldfusionMatch8.1

adobecoldfusionMatch9.0

adobecoldfusionMatch9.0.1

CPENameOperatorVersion
adobe:coldfusionadobe coldfusionle9.0.1
adobe:coldfusionadobe coldfusioneq4.5
adobe:coldfusionadobe coldfusioneq5.0
adobe:coldfusionadobe coldfusioneq6.0
adobe:coldfusionadobe coldfusioneq6.1
adobe:coldfusionadobe coldfusioneq7.0
adobe:coldfusionadobe coldfusioneq7.0.1
adobe:coldfusionadobe coldfusioneq7.0.2
adobe:coldfusionadobe coldfusioneq8.0
adobe:coldfusionadobe coldfusioneq8.0.1

CPE	Name	Operator	Version
adobe:coldfusion	adobe coldfusion	le	9.0.1
adobe:coldfusion	adobe coldfusion	eq	4.5
adobe:coldfusion	adobe coldfusion	eq	5.0
adobe:coldfusion	adobe coldfusion	eq	6.0
adobe:coldfusion	adobe coldfusion	eq	6.1
adobe:coldfusion	adobe coldfusion	eq	7.0
adobe:coldfusion	adobe coldfusion	eq	7.0.1
adobe:coldfusion	adobe coldfusion	eq	7.0.2
adobe:coldfusion	adobe coldfusion	eq	8.0
adobe:coldfusion	adobe coldfusion	eq	8.0.1

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html

kb2.adobe.com/cps/890/cpsid_89094.html

osvdb.org/70778

securitytracker.com/id?1025012

websecurity.com.ua/4879/

www.adobe.com/support/security/bulletins/apsb11-04.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON

Related for CVE-2011-0734

nvd1 cvelist1 prion1