CVE-2013-0629

Warnung

EPSS 65.9%
Veröffentlicht 09.01.2013 01:55:03
Zuletzt bearbeitet 16.06.2026 23:49:47
Erkennungen
Login

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 0 Referenzen 7

NVD 4 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Coldfusion Version 9.0

   Apple ≫ macOS X Version -
   Microsoft ≫ Windows Version -
   Opengroup ≫ Unix Version -

Adobe ≫ Coldfusion Version 9.0.1

   Apple ≫ macOS X Version -
   Microsoft ≫ Windows Version -
   Opengroup ≫ Unix Version -

Adobe ≫ Coldfusion Version 9.0.2

   Apple ≫ macOS X Version -
   Microsoft ≫ Windows Version -
   Opengroup ≫ Unix Version -

Adobe ≫ Coldfusion Version 10.0

   Apple ≫ macOS X Version -
   Microsoft ≫ Windows Version -
   Opengroup ≫ Unix Version -

07.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Adobe ColdFusion Directory Traversal Vulnerability

Schwachstelle

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	65.9%	0.992

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N