GCVE - cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Jrun (`199ea5cb-df4c-5840-9bb6-c9899ce336c0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-1874`	vulnerable	2026-06-08 04:51:25.520670	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.783Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb09-12.html http://osvdb.org/57187 http://www.dsecrg.com/pages/vul/show.php?id=151 http://www.securityfocus.com/archive/1/505804/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1873`	vulnerable	2026-06-08 04:51:25.519729	Details available Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter. Published: 2009-08-18T22:00:00.000Z Updated: 2024-08-07T05:27:54.702Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/9443 http://www.securityfocus.com/archive/1/505808/100/0/threaded http://www.adobe.com/support/security/bulletins/apsb09-12.html http://osvdb.org/57186 http://www.dsecrg.com/pages/vul/show.php?id=152	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5860`	vulnerable	2026-06-08 04:49:21.480723	Details available Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Published: 2007-02-14T02:00:00.000Z Updated: 2024-08-07T20:04:55.630Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24093 http://www.vupen.com/english/advisories/2007/0594 https://exchange.xforce.ibmcloud.com/vulnerabilities/32475 http://www.securitytracker.com/id?1017647 http://www.securityfocus.com/bid/22547	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5858`	vulnerable	2026-06-08 04:49:21.476755	Details available Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file. Published: 2007-01-10T02:00:00.000Z Updated: 2024-08-07T20:04:55.769Z Open on db.gcve.eu Reference links http://www.adobe.com/support/security/bulletins/apsb07-02.html http://www.securityfocus.com/archive/1/457799/100/0/threaded http://secunia.com/advisories/23668 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=466 http://securitytracker.com/id?1017490	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.