VULNERABILITY INTELLIGENCE
CVE-2007-5905
CVSS score6.8 MEDIUM
EPSS probability13.08%
CISA KEVNot currently listed
Published2007-11-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.