Lucene search
HistoryFeb 14, 2007 - 2:28 a.m.
CVE-2006-5860
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.005
Percentile
77.5%
Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
Node
adobecoldfusionMatch6.1enterprise_server
ORadobecoldfusionMatch7.0enterprise_multi-server
ORadobejrunMatch4.0
ORadobejrunMatch4.0sp1
ORadobejrunMatch4.0sp1a
ORadobejrunMatch4.0_build_61650
| Vendor | Product | Version | CPE |
|---|---|---|---|
| adobe | coldfusion | 6.1 | cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:* |
| adobe | coldfusion | 7.0 | cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:* |
| adobe | jrun | 4.0 | cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:* |
| adobe | jrun | 4.0 | cpe:2.3:a:adobe:jrun:4.0:sp1:*:*:*:*:*:* |
| adobe | jrun | 4.0 | cpe:2.3:a:adobe:jrun:4.0:sp1a:*:*:*:*:*:* |
| adobe | jrun | 4.0_build_61650 | cpe:2.3:a:adobe:jrun:4.0_build_61650:*:*:*:*:*:*:* |
Related
jvn
jvn
JVN#14243645 Adobe JRun cross-site scripting vulnerability
2007-02-14 00:00:00
securityvulns
securityvulns
Multiple Macromedia JRun bugs
2004-10-15 00:00:00
cvelist
cvelist
CVE-2006-5860
2007-02-14 02:00:00
cve
cve
CVE-2006-5860
2007-02-14 02:28:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.6
Confidence
High
EPSS
0.005
Percentile
77.5%
Related for NVD:CVE-2006-5860