CVE-2017-11285

Adobe ColdFusion has a cross-site scripting (XSS) vulnerability

published December 1, 2017

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Adobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and earlier versions for ColdFusion 2016, and Update 12 and earlier versions for ColdFusion 11.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02733 · 85.9th percentile
Published
2017-12-01T08:00Z
EPSS history
Timeline
  • 01 DEC 08:00Z
    Adobe ColdFusion has a cross-site scripting (XSS) vulnerability
    cvelistv5