Show filters
34 Total Results
Displaying 21-30 of 34
Sort by:
Attacker Value
Unknown
CVE-2017-11286
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Adobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
0
Attacker Value
Unknown
CVE-2017-11285
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
0
Attacker Value
Unknown
CVE-2017-11283
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
0
Attacker Value
Unknown
CVE-2017-11284
Disclosure Date: December 01, 2017 (last updated November 26, 2024)
Adobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.
0
Attacker Value
Unknown
CVE-2017-3008
Disclosure Date: April 27, 2017 (last updated November 26, 2024)
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability.
0
Attacker Value
Unknown
CVE-2017-3066
Disclosure Date: April 27, 2017 (last updated November 26, 2024)
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.
0
Attacker Value
Unknown
CVE-2016-4159
Disclosure Date: June 16, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-1113
Disclosure Date: May 11, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-1115
Disclosure Date: May 11, 2016 (last updated November 25, 2024)
Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
0
Attacker Value
Unknown
CVE-2016-1114
Disclosure Date: May 11, 2016 (last updated November 25, 2024)
Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
0
