ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .
                
            References
                    | Link | Resource | 
|---|---|
| https://helpx.adobe.com/security/products/coldfusion/apsb19-10.html | Vendor Advisory | 
| https://helpx.adobe.com/security/products/coldfusion/apsb19-10.html | Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 04:47
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () https://helpx.adobe.com/security/products/coldfusion/apsb19-10.html - Vendor Advisory | 
Information
                Published : 2019-05-24 19:29
Updated : 2024-11-21 04:47
NVD link : CVE-2019-7092
Mitre link : CVE-2019-7092
CVE.ORG link : CVE-2019-7092
JSON object : View
Products Affected
                adobe
- coldfusion
CWE
                
                    
                        
                        CWE-79
                        
            Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
