Vulnerability Details CVE-2011-0581
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 83.6%
CVSS Severity
CVSS v2 Score 4.3
References
- http://secunia.com/advisories/43264
- http://www.adobe.com/support/security/bulletins/apsb11-04.html
- http://www.securityfocus.com/bid/46281
- http://www.securitytracker.com/id?1025036
- http://www.vupen.com/english/advisories/2011/0334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65276
- http://secunia.com/advisories/43264
- http://www.adobe.com/support/security/bulletins/apsb11-04.html
- http://www.securityfocus.com/bid/46281
- http://www.securitytracker.com/id?1025036
- http://www.vupen.com/english/advisories/2011/0334
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65276
Products affected by CVE-2011-0581
-
cpe:2.3:a:adobe:coldfusion:8.0
-
cpe:2.3:a:adobe:coldfusion:8.0.1
-
cpe:2.3:a:adobe:coldfusion:9.0
-
cpe:2.3:a:adobe:coldfusion:9.0.1