10
CVE-2013-3350
- EPSS 7.56%
- Veröffentlicht 10.07.2013 10:55:02
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Quelle psirt@adobe.com
- CVE-Watchlists
- Unerledigt
LoginAdobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC) public methods via WebSockets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version10.0
Adobe ≫ Coldfusion Version10.0 Updateupdate1
Adobe ≫ Coldfusion Version10.0 Updateupdate2
Adobe ≫ Coldfusion Version10.0 Updateupdate3
Adobe ≫ Coldfusion Version10.0 Updateupdate4
Adobe ≫ Coldfusion Version10.0 Updateupdate8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.56% | 0.937 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://www.adobe.com/support/security/bulletins/apsb13-19.html
http://www.securitytracker.com/id/1028757
http://stackoverflow.com/questions/17351214/cf10-websocket-p2p-can-invoke-any-public-functions-in-any-cfc-from-javascript-h