CVE-2016-1113: XSS
Published May 11, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
28 affected components
Adobe ColdFusion=10.0
Adobe ColdFusion=10.0-update1
Adobe ColdFusion=10.0-update10
Adobe ColdFusion=10.0-update11
Adobe ColdFusion=10.0-update12
Adobe ColdFusion=10.0-update13
Adobe ColdFusion=10.0-update14
Adobe ColdFusion=10.0-update15
Adobe ColdFusion=10.0-update16
Adobe ColdFusion=10.0-update17
Adobe ColdFusion=10.0-update18
Adobe ColdFusion=10.0-update2
Adobe ColdFusion=10.0-update3
Adobe ColdFusion=10.0-update4
Adobe ColdFusion=10.0-update5
Adobe ColdFusion=10.0-update6
Adobe ColdFusion=10.0-update7
Adobe ColdFusion=10.0-update8
Adobe ColdFusion=10.0-update9
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=2016
Event History
May 11, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1113?
CVE-2016-1113 has been classified with a severity rating that indicates a moderate risk due to potential cross-site scripting attacks.
2
How do I fix CVE-2016-1113?
To fix CVE-2016-1113, update Adobe ColdFusion to version 10 Update 19, 11 Update 8, or 2016 Update 1 or later.
3
What type of vulnerability is CVE-2016-1113?
CVE-2016-1113 is classified as a cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2016-1113?
CVE-2016-1113 affects users of Adobe ColdFusion versions 10, 11, and 2016 prior to their respective updates.
5
Can CVE-2016-1113 be exploited remotely?
Yes, CVE-2016-1113 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.