CVE-2014-5315

Published: Sep 26, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (24)

Products: Adobe: Coldfusion, Acrobat

Adobe

2 products

Coldfusion

Acrobat

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Adobe Coldfusion	Up to 8.0.1
Adobe Coldfusion	Version 8.0

Configuration B

22 vulnerable

Vulnerable Software	Affected Versions
Adobe Acrobat	Up to 9.5.2
Adobe Acrobat	Version 9.0
Adobe Acrobat	Version 9.1.1
Adobe Acrobat	Version 9.1.2
Adobe Acrobat	Version 9.1.3
Adobe Acrobat	Version 9.1
Adobe Acrobat	Version 9.2
Adobe Acrobat	Version 9.3.1
Adobe Acrobat	Version 9.3.2
Adobe Acrobat	Version 9.3.3
Adobe Acrobat	Version 9.3.4
Adobe Acrobat	Version 9.3
Adobe Acrobat	Version 9.4.1
Adobe Acrobat	Version 9.4.2
Adobe Acrobat	Version 9.4.3
Adobe Acrobat	Version 9.4.4
Adobe Acrobat	Version 9.4.5
Adobe Acrobat	Version 9.4.6
Adobe Acrobat	Version 9.4.7
Adobe Acrobat	Version 9.4
Adobe Acrobat	Version 9.5.1
Adobe Acrobat	Version 9.5