CVE-2013-0631
high-risk
Published 2013-01-09
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Do I need to act?
!
83.3% chance of exploitation in next 30 days
EPSS score — higher than 17% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10
High
NETWORK
/ LOW complexity
Affected Products (3)
Affected Vendors
References (5)
Vendor Advisory
http://www.adobe.com/support/security/advisories/apsa13-01.html
Vendor Advisory
http://www.adobe.com/support/security/advisories/apsa13-01.html
62
/ 100
high-risk
Severity
26/34 · High
Exploitability
27/34 · High
Exposure
9/34 · Low