Adobe ColdFusion XSS Vulnerability (CVE-2016-4159)

Adobe ColdFusion XSS Vulnerability (CVE-2016-4159)
Adobe ColdFusion XSS Vulnerability (CVE-2016-4159)

Release date:
Updated on:

Affected Systems:

Adobe ColdFusion 2016 release
Adobe ColdFusion 11
Adobe ColdFusion 10

Description:

CVE (CAN) ID: CVE-2016-4159

Adobe ColdFusion is a dynamic Web server.

ColdFusion v10 and 11,201 6 release versions have the input verification vulnerability. Attackers can exploit this vulnerability to launch cross-site scripting attacks.

<* Source: Godwin Schembri


Link: https://helpx.adobe.com/security/products/coldfusion/apsb16-22.html
*>

Suggestion:

Vendor patch:

Adobe
-----
Adobe has released a Security Bulletin (APSB16-22) and patches for this:
APSB16-22: Hotfixes available for ColdFusion
Link: https://helpx.adobe.com/security/products/coldfusion/apsb16-22.html

This article permanently updates the link address: