GCVE - cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:7.0:*:solaris:*:*:*:*:*

part: a version: 7.0 update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Coldfusion (`db90b161-3a2c-5267-99af-6a14e5723f4c`)
Edition	solaris
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1878`	vulnerable	2026-06-08 04:51:25.523671	Details available Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.845Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb09-12.html http://osvdb.org/57191	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1877`	vulnerable	2026-06-08 04:51:25.522893	Details available Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.828Z Open on db.gcve.eu Reference links http://osvdb.org/57190 http://www.adobe.com/support/security/bulletins/apsb09-12.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1876`	vulnerable	2026-06-08 04:51:25.522036	Details available Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability." Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.736Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb09-12.html http://osvdb.org/57189	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1875`	vulnerable	2026-06-08 04:51:25.521324	Details available Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.666Z Open on db.gcve.eu Reference links http://osvdb.org/57188 http://www.adobe.com/support/security/bulletins/apsb09-12.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1872`	vulnerable	2026-06-08 04:51:25.515452	Details available Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.747Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb09-12.html http://osvdb.org/57182 http://osvdb.org/57183 http://www.dsecrg.com/pages/vul/show.php?id=122 http://osvdb.org/57185	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-1874`	vulnerable	2026-06-08 04:49:43.728441	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.