CVE-2022-28818

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-05-2022 09:15

Last modified: - 23-05-2022 08:33

Total changes: - 2

Description

ColdFusion versions CF2021U3 (and earlier) and CF2018U13 are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

Low

Integrity

None

Privileges required

Changed

Scope

Required

User interaction

6.1

Base score

2.8

2.7

Exploitability score

Impact score

Verification logic

vendor=adobe AND product=coldfusion AND version=2018 AND update=-

vendor=adobe AND product=coldfusion AND version=2018 AND update=update1

vendor=adobe AND product=coldfusion AND version=2018 AND update=update2

vendor=adobe AND product=coldfusion AND version=2018 AND update=update3

vendor=adobe AND product=coldfusion AND version=2018 AND update=update4

vendor=adobe AND product=coldfusion AND version=2018 AND update=update5

vendor=adobe AND product=coldfusion AND version=2018 AND update=update6

vendor=adobe AND product=coldfusion AND version=2018 AND update=update7

vendor=adobe AND product=coldfusion AND version=2018 AND update=update8

vendor=adobe AND product=coldfusion AND version=2018 AND update=update9

vendor=adobe AND product=coldfusion AND version=2021 AND update=update1

vendor=adobe AND product=coldfusion AND version=2021 AND update=update2

vendor=adobe AND product=coldfusion AND version=2021 AND update=update3

vendor=adobe AND product=coldfusion AND version=2021 AND update=-

vendor=adobe AND product=coldfusion AND version=2018 AND update=update10

vendor=adobe AND product=coldfusion AND version=2018 AND update=update13

vendor=adobe AND product=coldfusion AND version=2018 AND update=update12

vendor=adobe AND product=coldfusion AND version=2018 AND update=update11

vendor=adobe AND product=coldfusion AND versionEndExcluding=2018

Reference

https://helpx.adobe.com/security/products/coldfusion/apsb22-22.html

Keywords

CVE-2022-28818

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-28818

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures