| Vulnerability Name: | CVE-2013-1389 (CCN-84200) | ||||||||
| Assigned: | 2013-05-14 | ||||||||
| Published: | 2013-05-14 | ||||||||
| Updated: | 2020-09-04 | ||||||||
| Summary: | Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before Update 10 allows remote attackers to execute arbitrary code via unknown vectors. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
6.9 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-noinfo | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2013-1389 Source: CCN Type: Adobe Product Security Bulletin APSB13-13 Security update: Hotfix available for ColdFusion Source: CONFIRM Type: Vendor Advisory http://www.adobe.com/support/security/bulletins/apsb13-13.html Source: CCN Type: US-CERT VU#113732 Adobe ColdFusion 9 & 10 code injection vulnerability Source: CCN Type: BID-59849 Adobe ColdFusion CVE-2013-1389 Remote Code Execution Vulnerability Source: XF Type: UNKNOWN adobe-coldfusion-cve20131389-code-exec(84200) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||