Lucene search
HistoryFeb 14, 2007 - 1:28 a.m.
CVE-2006-5859
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.9%
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.
Affected configurations
Node
adobecoldfusionMatch7.0
ORadobecoldfusionMatch7.0.1
Related
cvelist
cvelist
CVE-2006-5859
2007-02-14 01:00:00
cve
cve
CVE-2006-5859
2007-02-14 01:28:00
jvn
jvn
JVN#28356427 ColdFusion cross-site scripting vulnerability
2007-02-14 00:00:00
securityvulns
securityvulns
Multiple Macromedia Coldfusion security vulnerabilities
2006-09-13 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.9%
Related for NVD:CVE-2006-5859