Vulnerability Details CVE-2009-1877
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.3%
CVSS Severity
CVSS v2 Score 4.3
References
Products affected by CVE-2009-1877
-
cpe:2.3:a:adobe:coldfusion:-
-
cpe:2.3:a:adobe:coldfusion:6.0
-
cpe:2.3:a:adobe:coldfusion:6.1
-
cpe:2.3:a:adobe:coldfusion:7.0
-
cpe:2.3:a:adobe:coldfusion:7.0.1
-
cpe:2.3:a:adobe:coldfusion:7.0.2
-
cpe:2.3:a:adobe:coldfusion:7.2
-
cpe:2.3:a:adobe:coldfusion:8.0
-
cpe:2.3:a:adobe:coldfusion:8.0.1
-
cpe:2.3:a:adobe:coldfusion:8.1