CVE-2013-1389: Critical severity adobe coldfusion vulnerability
Published May 16, 2013
·Updated
Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2 before Update 5, and 10 before Update 10 allows remote attackers to execute arbitrary code via unknown vectors.
Affected Software
10 affected components
Adobe ColdFusion=9.0
Adobe ColdFusion=9.0-update_10
Adobe ColdFusion=9.0.1
Adobe ColdFusion=9.0.1-update_9
Adobe ColdFusion=9.0.2
Adobe ColdFusion=9.0.2-update_4
Adobe ColdFusion=10.0
Adobe ColdFusion=10.0-update1
Adobe ColdFusion=10.0-update3
Adobe ColdFusion=10.0-update4
Event History
May 16, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1389?
CVE-2013-1389 has a high severity level due to the potential for remote code execution.
2
How do I fix CVE-2013-1389?
To fix CVE-2013-1389, update Adobe ColdFusion to the latest version or apply the necessary patches as specified by Adobe.
3
Which versions of Adobe ColdFusion are affected by CVE-2013-1389?
CVE-2013-1389 affects Adobe ColdFusion versions 9.0, 9.0.1, 9.0.2, and 10 before their respective updates.
4
What types of attacks can exploit CVE-2013-1389?
CVE-2013-1389 can be exploited by remote attackers to execute arbitrary code on vulnerable systems.
5
Is there a workaround for CVE-2013-1389?
Currently, the best approach for CVE-2013-1389 is to apply updates as no specific workaround is documented.