Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*

part: a version: 9.0.2 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-0572 vulnerable 2026-06-08 05:05:13.671091 Details available
Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0571 vulnerable 2026-06-08 05:05:13.670432 Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.779Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0570 vulnerable 2026-06-08 05:05:13.663212 Details available
Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Published: 2014-10-15T10:00:00.000Z
Updated: 2024-08-06T09:20:19.828Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5326 vulnerable 2026-06-08 05:04:51.296587 Details available
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
Published: 2013-11-13T01:00:00.000Z
Updated: 2024-08-06T17:06:52.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3349 vulnerable 2026-06-08 05:04:31.127263 Details available
Unspecified vulnerability in Adobe ColdFusion 9.0 through 9.0.2, when the JRun application server is used, allows remote attackers to cause a denial of service via unknown vectors.
Published: 2013-07-10T10:00:00.000Z
Updated: 2024-08-06T16:07:37.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3336 vulnerable 2026-06-08 05:04:30.950086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1389 vulnerable 2026-06-08 05:03:53.709434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1388 vulnerable 2026-06-08 05:03:53.706131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1387 vulnerable 2026-06-08 05:03:53.689306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0632 vulnerable 2026-06-08 05:03:49.138902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0631 vulnerable 2026-06-08 05:03:49.137892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0629 vulnerable 2026-06-08 05:03:49.050873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0625 vulnerable 2026-06-08 05:03:49.039570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5675 vulnerable 2026-06-08 05:02:58.010962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2048 vulnerable 2026-06-08 05:00:52.542421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.