3690 matches found
CVE-2022-28818
ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...
Cross site scripting
ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...
CVE-2022-28818 ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution
ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...
CVE-2022-28818
CVE-2022-28818 is a reflected Cross‑Site Scripting vulnerability affecting Adobe ColdFusion 2021 (CF2021U3 and earlier) and ColdFusion 2018 (CF2018U13). The issue arises from improper handling of user-supplied input in vulnerable pages, allowing malicious JavaScript to execute in a victim’s brows...
Adobe Releases Security Updates for Multiple Products
Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...
CVE-2022-28818: Improper Neutralization of Input During Web Page Generation
ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...
PT-2022-19258
Name of the Vulnerable Software and Affected Versions ColdFusion versions CF2021U3 and earlier ColdFusion version CF2018U13 Description A reflected Cross-Site Scripting XSS issue allows malicious JavaScript content to be executed within the context of a victim's browser if they visit a URL...
CVE-2022-28818
ColdFusion versions CF2021U3 and earlier and CF2018U13 are affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's...
Adobe ColdFusion Cross-site Scripting (APSB22-22: CVE-2022-28818)
A cross-site scripting vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...
Adobe ColdFusion 跨站脚本漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and a scripting language. A cross-site scripting vulnerability exists in Adobe ColdFusion. An attacker could exploit this...
APSB22-22 : Security update available for Adobe ColdFusion
Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve an Important vulnerability that could lead to arbitrary code execution...
Adobe ColdFusion Installed (macOS)
Binary data macosxadobecoldfusioninstalled.nbin...
Adobe ColdFusion Information Disclosure (CVE-2013-0631)
An information disclosure vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...
Adobe ColdFusion Directory Traversal Vulnerability
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files...
ColdFusion verifyldapserver vulnerability
Added: 03/07/2022 Background Adobe ColdFusion is a web application development platform written in Java. Problem The verifyldapserver method in utils.cfc allows a remote attacker to cause the server to download a Java class from an arbitrary LDAP server, leading to remote code execution. Resoluti...
ColdFusion verifyldapserver vulnerability
Added: 03/07/2022 Background Adobe ColdFusion is a web application development platform written in Java. Problem The verifyldapserver method in utils.cfc allows a remote attacker to cause the server to download a Java class from an arbitrary LDAP server, leading to remote code execution. Resoluti...
Adobe ColdFusion Information Disclosure Vulnerability
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server...
Adobe BlazeDS Information Disclosure Vulnerability
Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure...