Adobe ColdFusion 10.0 Update 13
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*
part: a version: 10.0 update: update13
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3066 |
vulnerable | 2026-06-08 05:09:26.374339 |
Details available
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.
Published: 2017-04-27T14:00:00.000Z
Updated: 2025-10-21T23:55:41.607Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3008 |
vulnerable | 2026-06-08 05:09:26.279861 |
Details available
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability.
Published: 2017-04-27T14:00:00.000Z
Updated: 2024-08-05T14:09:18.039Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4159 |
vulnerable | 2026-06-08 05:07:46.879545 |
Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-06-16T14:00:00.000Z
Updated: 2024-08-06T00:17:31.307Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1115 |
vulnerable | 2026-06-08 05:07:26.499781 |
Details available
Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.
Published: 2016-05-11T01:00:00.000Z
Updated: 2024-08-05T22:48:13.080Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1114 |
vulnerable | 2026-06-08 05:07:26.498840 |
Details available
Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.
Published: 2016-05-11T01:00:00.000Z
Updated: 2024-08-05T22:48:12.989Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1113 |
vulnerable | 2026-06-08 05:07:26.484610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9166 |
vulnerable | 2026-06-08 05:06:11.027556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.