Lucene search

K
cve[email protected]CVE-2013-1387
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1387

2022-10-0316:14:47
web.nvd.nist.gov
30
cve-2013-1387
adobe coldfusion
update
impersonation
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors.

Affected configurations

NVD
Node
adobecoldfusionMatch9.0
OR
adobecoldfusionMatch9.0.1
OR
adobecoldfusionMatch9.0.2
OR
adobecoldfusionMatch10.0
OR
adobecoldfusionMatch10.0update1
OR
adobecoldfusionMatch10.0update3
OR
adobecoldfusionMatch10.0update4

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

65.4%