PT-2017-11891
CVE-2017-11285
·
Published
2017-12-01
·
Updated
2020-09-04
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Adobe ColdFusion versions prior to Update 5 for ColdFusion 2016
Adobe ColdFusion versions prior to Update 13 for ColdFusion 11
Description
The issue is related to a cross-site scripting (XSS) problem.
Recommendations
For Adobe ColdFusion 2016, update to a version later than Update 4.
For Adobe ColdFusion 11, update to a version later than Update 12.
Found an issue in the description? Have something to add? Feel free to write us 👾