CVE-2006-4726
LOW severity · CVSS 2.6
2.6CVSS LOW
Summary
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page.
Impact & exploitability
Attack vectorNetwork
Attack complexityHigh
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impact—
Availability impactNone
Exploit probability (EPSS)2%
AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: http://secunia.com/advisories/21858 ↗
Additional information
- NVD record
- http://secunia.com/advisories/21858Patch
- http://www.adobe.com/support/security/bulletins/apsb06-14.htmlPatch
- http://www.securityfocus.com/bid/19982Patch
- http://securitytracker.com/id?1016833
- http://www.vupen.com/english/advisories/2006/3575
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28922