Actively exploited · Published Jan 9, 2013 · Assigned by adobe
CVE-2013-0631
High 7.5 Exploited
In plain English
A high-severity security flaw in ColdFusion from Adobe. Attackers are actively exploiting it in the wild (listed by CISA on March 7, 2022). The chance it is exploited in the next 30 days is estimated at 66.4% (higher than 99.3% of all known vulnerabilities). Apply updates per vendor instructions.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)66.4%top 0.7% of all CVEs
Exploited in the wildYesCISA KEV since Mar 7, 2022
Attack toolingNoneno public tooling known
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Sep 7, 2022.
Official description
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Affected products (as reported)
References
- http://www.adobe.com/support/security/bulletins/apsb13-03.html x_refsource_CONFIRM
- http://www.adobe.com/support/security/advisories/apsa13-01.html x_refsource_CONFIRM
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0631 government-resource