Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2013-0632

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Adobe ColdFusion是美国奥多比（Adobe）公司的一款动态Web服务器产品，其运行的CFML（ColdFusion Markup Language）是针对Web应用的一种程序设计语言。 Adobe ColdFusion 9.0，9.0.1，9.0.2以及10版本中存在漏洞。通过未明向量，远程攻击者利用该漏洞绕过身份验证，执行任意代码。

AI Predicted 9.8 Difficulty: Trivial KEV EPSS 93.60% · P100
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2013-0632

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as exploited in the wild in January 2013.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Adobe ColdFusion 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe ColdFusion是美国奥多比（Adobe）公司的一款动态Web服务器产品，其运行的CFML（ColdFusion Markup Language）是针对Web应用的一种程序设计语言。 Adobe ColdFusion 9.0，9.0.1，9.0.2以及10版本中存在漏洞。通过未明向量，远程攻击者利用该漏洞绕过身份验证，执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2013-0632

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-0632

请登录查看更多情报信息。

Vendor Advisories for CVE-2013-0632 (2)

Exploits & Public PoCs for CVE-2013-0632 (1)

Same Patch Batch · n/a · 2013-01-17 · 92 CVEs total

CVE-2013-0372 Oracle Enterprise Manager Grid Control 远程安全漏洞
CVE-2013-0369 Oracle PeopleSoft PeopleTools 远程安全漏洞
CVE-2013-0367 Oracle MySQL Server 远程安全漏洞
CVE-2013-0364 Oracle Database Mobile/Lite Server 远程安全漏洞
CVE-2013-0363 Oracle Database Mobile/Lite Server 远程未明安全漏洞
CVE-2013-0362 Oracle Database Mobile/Lite Server 远程安全漏洞
CVE-2013-0361 Oracle Database Mobile/Lite Server 远程未明安全漏洞
CVE-2013-0360 Oracle Enterprise Manager Grid Control 未明安全漏洞
CVE-2013-0365 Oracle Siebel CRM 远程安全漏洞
CVE-2013-0371 Oracle MySQL Server 远程安全漏洞
CVE-2013-0370 Oracle Agile PLM Framework 远程安全漏洞
CVE-2013-0373 Oracle Enterprise Manager Grid Control 未明安全漏洞
CVE-2013-0374 Oracle Enterprise Manager Grid Control 远程安全漏洞
CVE-2013-0376 Oracle E-Business Suite 远程安全漏洞
CVE-2013-0377 Oracle E-Business Suite 远程安全漏洞
CVE-2013-0378 Oracle Siebel CRM 远程安全漏洞
CVE-2013-0379 Oracle Siebel CRM 远程安全漏洞
CVE-2013-0380 Oracle E-Business Suite 远程安全漏洞
CVE-2013-0381 Oracle E-Business Suite 远程安全漏洞
CVE-2013-0382 Oracle E-Business Suite 远程安全漏洞

Showing top 20 of 92 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-0632

No comments yet

Leave a comment