PT-2011-3888

CVE-2011-2463

Published

2011-12-14

Updated

2012-02-02

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 8.0 through 9.0.1

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via vectors involving the cfform tag.

Recommendations For Adobe ColdFusion versions 8.0 through 9.0.1, update to a version that contains a fix for this issue to prevent exploitation.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾