Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2019-7092

ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .

  • Published: May 24, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-7092
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
adobe / coldfusion 2018 2018.x
adobe / coldfusion 2016 2016.x
adobe / coldfusion 11.0 11.0.x
adobe / coldfusion 11.0-update1 11.0-update1.x
adobe / coldfusion 11.0-update10 11.0-update10.x
adobe / coldfusion 11.0-update11 11.0-update11.x
adobe / coldfusion 11.0-update12 11.0-update12.x
adobe / coldfusion 11.0-update13 11.0-update13.x
adobe / coldfusion 11.0-update14 11.0-update14.x
adobe / coldfusion 11.0-update15 11.0-update15.x
adobe / coldfusion 11.0-update2 11.0-update2.x
adobe / coldfusion 11.0-update3 11.0-update3.x
adobe / coldfusion 11.0-update4 11.0-update4.x
adobe / coldfusion 11.0-update5 11.0-update5.x
adobe / coldfusion 11.0-update6 11.0-update6.x
adobe / coldfusion 11.0-update7 11.0-update7.x
adobe / coldfusion 11.0-update8 11.0-update8.x
adobe / coldfusion 11.0-update9 11.0-update9.x
adobe / coldfusion 2016-update1 2016-update1.x
adobe / coldfusion 2016-update2 2016-update2.x
adobe / coldfusion 2016-update3 2016-update3.x
adobe / coldfusion 2016-update4 2016-update4.x
adobe / coldfusion 2016-update5 2016-update5.x
adobe / coldfusion 2016-update6 2016-update6.x
adobe / coldfusion 2016-update7 2016-update7.x
adobe / coldfusion 2018-update1 2018-update1.x