CVE-2011-0735: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."

Unscored severity · published Feb 1, 2011

CVE-2011-0735

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."

–

CVSS

2.6%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)2.6% · higher than 85% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

ColdFusion · Adobe

through 9.0.1; 4.5; 5.0; 6.0; 6.1; 7.0; +7 more · source: NVD

Affected product

ColdFusion

Adobe

All ColdFusion CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2011-0735

CVE.org

https://www.cve.org/CVERecord?id=CVE-2011-0735

Exploit

http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html

kb2.adobe.com

http://kb2.adobe.com/cps/890/cpsid_89094.html

osvdb.org

http://osvdb.org/70779

Exploit

http://websecurity.com.ua/4879/

www.adobe.com

http://www.adobe.com/support/security/bulletins/apsb11-04.html