CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2017-3008

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a reflected cross-site scripting vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

http://www.securityfocus.com/bid/98002
http://www.securitytracker.com/id/1038364
https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html
http://www.securityfocus.com/bid/98002
http://www.securitytracker.com/id/1038364
https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html

Products affected by CVE-2017-3008

Adobe » Coldfusion » Version: 10.0

cpe:2.3:a:adobe:coldfusion:10.0
Adobe » Coldfusion » Version: 11.0

cpe:2.3:a:adobe:coldfusion:11.0
Adobe » Coldfusion » Version: 2016

cpe:2.3:a:adobe:coldfusion:2016

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-3008

Products

Pricing

Contact Us