Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-3008
HistoryApr 27, 2017 - 2:59 p.m.

CVE-2017-3008

2017-04-2714:59:00
CWE-79
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability.

Affected configurations

NVD
Node
adobecoldfusionMatch10.0-
OR
adobecoldfusionMatch10.0update1
OR
adobecoldfusionMatch10.0update10
OR
adobecoldfusionMatch10.0update11
OR
adobecoldfusionMatch10.0update12
OR
adobecoldfusionMatch10.0update13
OR
adobecoldfusionMatch10.0update14
OR
adobecoldfusionMatch10.0update15
OR
adobecoldfusionMatch10.0update16
OR
adobecoldfusionMatch10.0update17
OR
adobecoldfusionMatch10.0update18
OR
adobecoldfusionMatch10.0update19
OR
adobecoldfusionMatch10.0update2
OR
adobecoldfusionMatch10.0update20
OR
adobecoldfusionMatch10.0update21
OR
adobecoldfusionMatch10.0update22
OR
adobecoldfusionMatch10.0update3
OR
adobecoldfusionMatch10.0update4
OR
adobecoldfusionMatch10.0update5
OR
adobecoldfusionMatch10.0update6
OR
adobecoldfusionMatch10.0update7
OR
adobecoldfusionMatch10.0update8
OR
adobecoldfusionMatch10.0update9
OR
adobecoldfusionMatch11.0-
OR
adobecoldfusionMatch11.0update1
OR
adobecoldfusionMatch11.0update10
OR
adobecoldfusionMatch11.0update11
OR
adobecoldfusionMatch11.0update2
OR
adobecoldfusionMatch11.0update3
OR
adobecoldfusionMatch11.0update4
OR
adobecoldfusionMatch11.0update5
OR
adobecoldfusionMatch11.0update6
OR
adobecoldfusionMatch11.0update7
OR
adobecoldfusionMatch11.0update8
OR
adobecoldfusionMatch11.0update9
OR
adobecoldfusionMatch2016-
OR
adobecoldfusionMatch2016update1
OR
adobecoldfusionMatch2016update2
OR
adobecoldfusionMatch2016update3

Related

cve 1
prion 1
cvelist 1
nessus 1
openvas 1
adobe 1
threatpost 1
cve
cve
CVE-2017-3008
2017-04-27 14:59:00
prion
prion
Cross site scripting
2017-04-27 14:59:00
cvelist
cvelist
CVE-2017-3008
2017-04-27 14:00:00
nessus
nessus
Adobe ColdFusion 10.x < 10u23 / 11.x < 11u12 / 2016.x < 2016u4 Multiple Vulnerabilities (APSB17-14)
2017-04-25 00:00:00
openvas
openvas
Adobe ColdFusion Multiple Vulnerabilities (APSB17-14)
2017-04-26 00:00:00
adobe
adobe
APSB17-14 Security update available for ColdFusion
2017-04-25 00:00:00
threatpost
threatpost
ColdFusion Hotfix Resolves XSS, Java Deserialization Bugs
2017-04-25 12:36:08

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.9%

JSON
Related for NVD:CVE-2017-3008
cve1prion1cvelist1nessus1openvas1adobe1threatpost1