First published: Wed Nov 18 2015(Updated: )
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8052.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe ColdFusion | <=10.0 | |
Adobe ColdFusion | <=11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-8053 is considered a medium severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2015-8053, update Adobe ColdFusion to version 10 Update 18 or later, or version 11 Update 7 or later.
CVE-2015-8053 affects Adobe ColdFusion 10 before Update 18 and Adobe ColdFusion 11 before Update 7.
Yes, CVE-2015-8053 can be exploited remotely by attackers to inject arbitrary web script or HTML.
The potential consequences of CVE-2015-8053 include unauthorized access to user data and hijacking of user sessions.