CVE-2011-0580: XSS

Published Feb 10, 2011

Updated

Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

4 affected components

Adobe ColdFusion=8.0

Adobe ColdFusion=9.0

Adobe ColdFusion=8.0.1

Adobe ColdFusion=9.0.1

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb11-04.html

Event History

Feb 10, 2011

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0580?

CVE-2011-0580 is considered a medium severity vulnerability that could allow attackers to perform cross-site scripting attacks.

How do I fix CVE-2011-0580?

To fix CVE-2011-0580, upgrade your Adobe ColdFusion installation to the latest version that is not affected by this vulnerability.

Who is affected by CVE-2011-0580?

CVE-2011-0580 affects users of Adobe ColdFusion versions 8.0 to 9.0.1.

What are the potential impacts of CVE-2011-0580?

The potential impacts of CVE-2011-0580 include unauthorized access to sensitive information and user impersonation through injected scripts.

Is CVE-2011-0580 a common vulnerability?

CVE-2011-0580 is recognized as a notable vulnerability due to its existence in a widely used software platform, impacting many users.