CVE-2015-0345

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

3.38% chance of exploitation in the next 30 days, 88th percentile

Published

2015-04-15

Updated

2024-08-06

Proof-of-concept exploits (1)

• BishopFox/coldfusion-10-11-xss22★ · 2015-06-12

References

• CVE Record
• NVD entry

Related

• CVE-2019-11510
• CVE-2021-35211
• CVE-2022-22274
• CVE-2023-0656
• CVE-2023-3519
• CVE-2025-27090