high7.5Known exploited
CVE-2013-0631
Adobe ColdFusion Information Disclosure Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-07. Federal due date: 2022-09-07.
Apply updates per vendor instructions.
Impact
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Coldfusion | Versions 9.0, 9.0.1, 9.0.2 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.adobe.com/support/security/advisories/apsa13-01.html
- http://www.adobe.com/support/security/bulletins/apsb13-03.html
- http://www.adobe.com/support/security/advisories/apsa13-01.html
- http://www.adobe.com/support/security/bulletins/apsb13-03.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0631