ID de Prueba:	1.3.6.1.4.1.25623.1.0.807588
Categoría:	Web application abuses
Título:	Adobe ColdFusion Multiple Vulnerabilities (APSB16-16)
Resumen:	Adobe ColdFusion is prone to multiple vulnerabilities.
Descripción:	Summary: Adobe ColdFusion is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An insufficient validation of user supplied input via unspecified vectors. - An important Java deserialization vulnerability in Apache Commons Collections library. - The mishandling of wildcards in name fields of X.509 certificates. Vulnerability Impact: Successful exploitation will allow remote attackers to inject arbitrary web script or HTML via unspecified vectors and allow man-in-the-middle attackers to spoof servers. Affected Software/OS: ColdFusion 10 before Update 19 and 11 before Update 8. Solution: Upgrade to version 10 Update 19 or 11 Update 8 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1113 BugTraq ID: 90507 http://www.securityfocus.com/bid/90507 http://www.securitytracker.com/id/1035829 Common Vulnerability Exposure (CVE) ID: CVE-2016-1114 BugTraq ID: 90506 http://www.securityfocus.com/bid/90506 Common Vulnerability Exposure (CVE) ID: CVE-2016-1115 BugTraq ID: 90514 http://www.securityfocus.com/bid/90514
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.