Adobe : Security Vulnerabilities, CVEs, Published In February 2007
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
Max CVSS
4.3
EPSS Score
1.48%
Published
2007-02-07
Updated
2018-10-16
Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Max CVSS
4.3
EPSS Score
0.55%
Published
2007-02-14
Updated
2017-07-20
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.
Max CVSS
4.3
EPSS Score
0.38%
Published
2007-02-14
Updated
2011-03-08
3 vulnerabilities found