CVE-2015-8052: XSS
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8053.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8052?
CVE-2015-8052 is classified as a critical vulnerability due to its potential for remote exploitation via XSS.
How do I fix CVE-2015-8052?
To fix CVE-2015-8052, update Adobe ColdFusion to version 10 Update 18 or 11 Update 7 or later.
What types of attacks can CVE-2015-8052 enable?
CVE-2015-8052 can enable remote attackers to perform cross-site scripting attacks, injecting arbitrary scripts or HTML into a web application.
Which Adobe ColdFusion versions are affected by CVE-2015-8052?
CVE-2015-8052 affects Adobe ColdFusion 10 before Update 18 and ColdFusion 11 before Update 7.
Is there a workaround for CVE-2015-8052?
There are no known workarounds for CVE-2015-8052; the best course of action is to apply the necessary updates.