Vulnerabilities (CVE)

Filtered by vendor Adobe Subscribe
Filtered by product Coldfusion
Total 141 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-5859 1 Adobe 1 Coldfusion 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.