CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-01-09
Adobe ColdFusion Authentication Bypass and Remote Code Execution Vulnerability (CVE-2013-0625) Advisory
[Affected Scope] Adobe ColdFusion versions 9.0, 9.0.1, and 9.0.2 when an administrator password is not configured
[Impact] Remote attackers can bypass authentication, gain administrative access, and potentially execute arbitrary code to compromise the server
[Mitigation] Apply the official Adobe security patch (APSB13-03), enforce strong administrator passwords, and restrict external access to the admin console