Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:9.0:update_10:*:*:*:*:*:*

part: a version: 9.0 update: update_10

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0572 vulnerable 2026-06-08 05:05:13.671002 Details available
Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0571 vulnerable 2026-06-08 05:05:13.670343 Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0570 vulnerable 2026-06-08 05:05:13.660203 Details available
Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1389 vulnerable 2026-06-08 05:03:53.708209 Details available
Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before Update 10 allows remote attackers to execute arbitrary code via unknown vectors.
Published: 2013-05-16T10:00:00.000Z
Updated: 2024-09-16T23:16:34.551Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.