CVE-2009-1875: XSS
Published Aug 18, 2009
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877.
Affected Software
21 affected components
Adobe ColdFusion<=8.0.1
Adobe ColdFusion=6.0
Adobe ColdFusion=6.0
Adobe ColdFusion=6.0
Adobe ColdFusion=6.0
Adobe ColdFusion=6.0
Adobe ColdFusion=6.1
Adobe ColdFusion=6.1
Adobe ColdFusion=6.1
Adobe ColdFusion=6.1
Adobe ColdFusion=6.1
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0
Adobe ColdFusion=7.0.1
Adobe ColdFusion=7.0.2
Adobe ColdFusion=7.2-unknown
Adobe ColdFusion=8.0
Adobe ColdFusion=8.1
Remediation
Event History
Aug 18, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1875?
CVE-2009-1875 is classified as a high severity vulnerability due to its potential to allow arbitrary script execution.
2
How do I fix CVE-2009-1875?
To fix CVE-2009-1875, upgrade Adobe ColdFusion to the latest version or apply the patches provided by Adobe.
3
Which Adobe ColdFusion versions are affected by CVE-2009-1875?
CVE-2009-1875 affects Adobe ColdFusion versions 6.0, 6.1, 7.0, 7.0.1, 7.0.2, and 8.0.1 and earlier.
4
Can CVE-2009-1875 be exploited remotely?
Yes, CVE-2009-1875 can be exploited remotely by attackers to inject malicious scripts.
5
What type of vulnerability is CVE-2009-1875?
CVE-2009-1875 is classified as a cross-site scripting (XSS) vulnerability.