CVE-2009-1872

no score yetEPSS 16%

adobe coldfusion: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2009-08-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

adobe:coldfusion

References

http://osvdb.org/57182
http://osvdb.org/57183
http://osvdb.org/57184
http://osvdb.org/57185
http://www.adobe.com/support/security/bulletins/apsb09-12.html

Check your stack JSON