CVE-2014-0570

Adobe ColdFusion 9.0-9.0.2, 10, 11 - Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031020
Patch, Vendor Advisory x_refsource_confirm
http://helpx.adobe.com/security/products/coldfusion/apsb14-23.html

Scores

EPSS 0.0252
EPSS Percentile 83.0%

Details

CWE
CWE-352
Status published
Products (5)
adobe/coldfusion 9.0 (3 CPE variants)
adobe/coldfusion 9.0.1 (3 CPE variants)
adobe/coldfusion 9.0.2 (3 CPE variants)
adobe/coldfusion 10.0 (8 CPE variants)
adobe/coldfusion 11.0
Published Oct 15, 2014
Tracked Since Feb 18, 2026