Unrated severityNVD Advisory· Published Nov 13, 2013· Updated Jun 16, 2026
CVE-2013-5326
CVE-2013-5326
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:adobe:coldfusion:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:9.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:*:update11:*:*:*:*:*:*range: <=10.0
- (no CPE)range: 9.0 < Update 12, 9.0.1 < Update 11, 9.0.2 < Update 6, 10 < Update 12
Patches
Vulnerability mechanics
References
2- www.adobe.com/support/security/bulletins/apsb13-27.htmlnvdVendor Advisory
- www.kb.cert.org/vuls/id/295276nvdUS Government Resource
News mentions
0No linked articles in our index yet.