Vulnerability Database

315,050

Total vulnerabilities in the database

CVE-2012-2041

CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

  • Published: Jun 13, 2012
  • Updated: Nov 9, 2025
  • CVE: CVE-2012-2041
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
adobe / coldfusion 8.0 8.0.x
adobe / coldfusion 9.0 9.0.x
adobe / coldfusion 8.0.1 8.0.1.x