5.9 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
69.4%
Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function.
secunia.com/advisories/29332
www.adobe.com/support/security/bulletins/apsb08-07.html
www.securityfocus.com/bid/28205
www.securitytracker.com/id?1019590
www.vupen.com/english/advisories/2008/0862/references
exchange.xforce.ibmcloud.com/vulnerabilities/41145