CVE-2013-0631

adobe coldfusion

Published 9 Jan 2013 · updated 16 Jun 2026 · Analyzed

7.5 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 7 Mar 2022, with a remediation deadline of 7 Sept 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

References

www.adobe.com/support/security/advisories/apsa13-01.html · Vendor Advisory
www.adobe.com/support/security/bulletins/apsb13-03.html · Not Applicable
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0631 · US Government Resource