7.5

CVE-2005-4342

ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Macromedia ≫ Coldfusion Version6.0
Macromedia ≫ Coldfusion Version6.1
Macromedia ≫ Coldfusion Version6.1 Editionenterprise_with_jrun
Macromedia ≫ Coldfusion Version6.1 Editionj2ee_application_server
Macromedia ≫ Coldfusion Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.748
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P