← Back

CVE-2019-7092

nvd nist
Published: May 24, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .

Affected (26)

Products: Adobe: Coldfusion
Adobe
1 product
Coldfusion
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Coldfusion
Version 11.0
Coldfusion
Version 11.0 update10
Coldfusion
Version 11.0 update11
Coldfusion
Version 11.0 update12
Coldfusion
Version 11.0 update13
Coldfusion
Version 11.0 update14
Coldfusion
Version 11.0 update15
Coldfusion
Version 11.0 update1
Coldfusion
Version 11.0 update2
Coldfusion
Version 11.0 update3
Coldfusion
Version 11.0 update4
Coldfusion
Version 11.0 update5
Coldfusion
Version 11.0 update6
Coldfusion
Version 11.0 update7
Coldfusion
Version 11.0 update8
Coldfusion
Version 11.0 update9
Coldfusion
Version 2016
Coldfusion
Version 2016 update1
Coldfusion
Version 2016 update2
Coldfusion
Version 2016 update3
Coldfusion
Version 2016 update4
Coldfusion
Version 2016 update5
Coldfusion
Version 2016 update6
Coldfusion
Version 2016 update7
Coldfusion
Version 2018
Coldfusion
Version 2018 update1

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (2)

Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.