Coldfusion
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:4.5:*:*:*:*:*:*:*
part: a version: 4.5 update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-0737 |
vulnerable | 2026-06-08 04:56:39.404950 |
Details available
Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure
Published: 2011-02-01T17:00:00.000Z
Updated: 2024-08-06T22:05:53.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0736 |
vulnerable | 2026-06-08 04:56:39.400621 |
Details available
Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure
Published: 2011-02-01T17:00:00.000Z
Updated: 2025-01-21T17:41:57.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0735 |
vulnerable | 2026-06-08 04:56:39.399868 |
Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."
Published: 2011-02-01T17:00:00.000Z
Updated: 2024-08-06T22:05:52.954Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0734 |
vulnerable | 2026-06-08 04:56:39.393487 |
Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier.
Published: 2011-02-01T17:00:00.000Z
Updated: 2024-08-06T22:05:53.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1294 |
vulnerable | 2026-06-08 04:54:07.050360 |
Details available
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors.
Published: 2010-05-13T17:00:00.000Z
Updated: 2024-09-16T18:29:49.146Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1293 |
vulnerable | 2026-06-08 04:54:07.043779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3467 |
vulnerable | 2026-06-08 04:51:42.202317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.