VULNERABILITY INTELLIGENCE

CVE-2010-2861

CVSS score9.8 CRITICAL
EPSS probability99.75%
CISA KEVKnown exploited vulnerability
Published2010-08-11
Last modified2026-10-02
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe ColdFusion Directory Traversal Vulnerability

Vendor / product: Adobe / ColdFusion

Description

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references