VDB
CVE-2013-5326
CVE-2013-5326
PUBLISHED
CVSS 3.5 LOW
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
EPSS 0.49% · 66.1th percentile
Risk Scores
CVSS 2.0
3.5
EPSS Score
0.49%
66.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| adobe | coldfusion | 10.0, 9.0, 9.0.1 |
| n/a | n/a | n/a |
Timeline
- Nov 13, 2013 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- http://www.adobe.com/support/security/bulletins/apsb13-27.html url
- VU#295276 third-party-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2013-5326 advisory