Vulnerability Details CVE-2022-28818
ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.6%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2022-28818
-
cpe:2.3:a:adobe:coldfusion:-
-
cpe:2.3:a:adobe:coldfusion:10.0
-
cpe:2.3:a:adobe:coldfusion:11.0
-
cpe:2.3:a:adobe:coldfusion:2016
-
cpe:2.3:a:adobe:coldfusion:2018
-
cpe:2.3:a:adobe:coldfusion:2021
-
cpe:2.3:a:adobe:coldfusion:6.0
-
cpe:2.3:a:adobe:coldfusion:6.1
-
cpe:2.3:a:adobe:coldfusion:7.0
-
cpe:2.3:a:adobe:coldfusion:7.0.1
-
cpe:2.3:a:adobe:coldfusion:7.0.2
-
cpe:2.3:a:adobe:coldfusion:7.2
-
cpe:2.3:a:adobe:coldfusion:8.0
-
cpe:2.3:a:adobe:coldfusion:8.0.1
-
cpe:2.3:a:adobe:coldfusion:9.0
-
cpe:2.3:a:adobe:coldfusion:9.0.1
-
cpe:2.3:a:adobe:coldfusion:9.0.2