CVE-2016-1113

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Code injection

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

CVE-2016-1115

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2016-1113

CVE-2016-1113 affects Adobe ColdFusion 10 (before Update 19), 11 (before Update 8), and 2016 (before Update 1). The vulnerability is an XSS flaw caused by insufficient input validation that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sources a...

CVE-2016-1114

Adobe ColdFusion is vulnerable to remote code execution via deserialization of crafted Java objects tied to the Apache Commons Collections library. Affected products/versions: ColdFusion 10 before Update 19, ColdFusion 11 before Update 8, and ColdFusion 2016 before Update 1. The issue enables an ...

CVE-2016-1114

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

CVE-2016-1115

Adobe ColdFusion is affected by CVE-2016-1115 due to a wildcard handling flaw in X.509 certificate name fields, enabling MITM server spoofing via crafted certs. Affected products: ColdFusion 10 before Update 19, ColdFusion 11 before Update 8, and ColdFusion 2016 before Update 1. Root cause: impro...

CVE-2016-1113

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1115: Improper Input Validation

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate...

PT-2016-1959

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 before Update 19 Adobe ColdFusion versions 11 before Update 8 Adobe ColdFusion versions 2016 before Update 1 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java...

CVE-2016-1114: Deserialization of Untrusted Data

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...

PT-2016-1958

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 before Update 19 Adobe ColdFusion versions 11 before Update 8 Adobe ColdFusion versions 2016 before Update 1 Description The issue exists due to insufficient input validation in the ColdFusion interpreter. This...

PT-2016-1960

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 before Update 19 Adobe ColdFusion versions 11 before Update 8 Adobe ColdFusion versions 2016 before Update 1 Description The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers...

Adobe Patches 95 Vulnerabilities in Acrobat, Reader, Warns of Flash Zero Day

Adobe rolled out security updates for three of its products on Tuesday, including 95 fixes it pushed for Acrobat, Reader, and ColdFusion. Users will have to wait until later this week, however, to patch a critical vulnerability that exists in Flash Player. It may only be a matter of time until th...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in ColdFusion, Acrobat, and Reader. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Adobe Security Bulletins...

APSB16-16 Security update available for ColdFusion

Adobe has released security hotfixes for ColdFusion versions 10, 11 and the 2016 release. These hotfixes resolve an input validation issue CVE-2016-1113, a host name verification problem with wild card certificates CVE-2016-1115 and include an updated version of Apache Commons Collections library...

Adobe ColdFusion Multiple Vulnerabilities (APSB15-29)

Adobe ColdFusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:coldfusion";...