Coldfusion
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*
part: a version: 6.1 update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | enterprise_server |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-1878 |
vulnerable | 2026-06-08 04:51:25.523478 |
Details available
Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-08-07T05:27:54.845Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1877 |
vulnerable | 2026-06-08 04:51:25.522783 |
Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-08-07T05:27:54.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1876 |
vulnerable | 2026-06-08 04:51:25.521925 |
Details available
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-08-07T05:27:54.736Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1875 |
vulnerable | 2026-06-08 04:51:25.521208 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877.
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-08-07T05:27:54.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1872 |
vulnerable | 2026-06-08 04:51:25.511175 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
Published: 2009-08-18T22:00:00.000Z
Updated: 2024-08-07T05:27:54.747Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1278 |
vulnerable | 2026-06-08 04:49:41.960533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5860 |
vulnerable | 2026-06-08 04:49:21.480133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.