Adobe » Coldfusion : Security Vulnerabilities, CVEs, Published In 2013
CVE-2013-3336
Public exploit
Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors.
Max CVSS
5.0
EPSS Score
97.40%
Published
2013-05-09
Updated
2013-11-07
CVE-2013-0632
Known exploited
Public exploit
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.
Max CVSS
10.0
EPSS Score
97.40%
Published
2013-01-17
Updated
2014-01-17
CISA KEV Added
2022-03-03
2 vulnerabilities found