Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html | Patch Vendor Advisory |
| https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html - Patch, Vendor Advisory |
03 Jun 2022, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html - Patch, Vendor Advisory |
01 Jul 2021, 16:25
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 5.4 |
28 Jun 2021, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction. |
Information
Published : 2021-04-15 14:15
Updated : 2024-11-21 05:47
NVD link : CVE-2021-21087
Mitre link : CVE-2021-21087
CVE.ORG link : CVE-2021-21087
JSON object : View
Products Affected
adobe
- coldfusion
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')