CVE-2015-8053: XSS
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8052.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8053?
CVE-2015-8053 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-8053?
To fix CVE-2015-8053, update Adobe ColdFusion to version 10 Update 18 or later, or version 11 Update 7 or later.
What types of applications are affected by CVE-2015-8053?
CVE-2015-8053 affects Adobe ColdFusion 10 before Update 18 and Adobe ColdFusion 11 before Update 7.
Can CVE-2015-8053 be exploited remotely?
Yes, CVE-2015-8053 can be exploited remotely by attackers to inject arbitrary web script or HTML.
What are the potential consequences of CVE-2015-8053?
The potential consequences of CVE-2015-8053 include unauthorized access to user data and hijacking of user sessions.