Veille CVE
CVE-2013-0631
7.5 Élevée Exploitée activementCatalogue CISA KEV — Adobe ColdFusion Information Disclosure Vulnerability
Ajoutée le 07/03/2022 · Échéance de correction (agences US) : 07/09/2022
Action requise : Apply updates per vendor instructions.
Description
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.5 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | 7.5 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| 2.0 | 5.0 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Références
- http://www.adobe.com/support/security/advisories/apsa13-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-03.html Not Applicable
- http://www.adobe.com/support/security/advisories/apsa13-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb13-03.html Not Applicable
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0631 US Government Resource