CVE-2013-0631

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

Score

CVSS 3.1 7.5 High

Status

Analyzed - psirt@adobe.com

Published

2013-01-09

Last modified

2025-10-22

Known exploited (CISA KEV)

since 2022-03-07, action due 2022-09-07: Apply updates per vendor instructions.

Affected products

• Coldfusion (Adobe)

References

• http://www.adobe.com/support/security/advisories/apsa13-01.html
• http://www.adobe.com/support/security/bulletins/apsb13-03.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0631