JVN#84376800: Help Page in multiple Adobe products vulnerable to cross-site scripting

The Help page provided in multiple Adobe products contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the software
Update to the latest version of the product according to the information provided by the developer.

According to the developer, the Help pages available on the developer’s website were also affected by this vulnerability and fixed these pages as well.

Products Affected

• Adobe Acrobat 9.5.2 and earlier
• ColdFusion 8.0.1 and earlier