VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 26, 2014· Updated Jun 17, 2026

CVE-2014-5315

CVE-2014-5315

Description

Cross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

26
  • Adobe Inc./Acrobat23 versions
    cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*range: <=9.5.2
    • cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:acrobat:9.5:*:*:*:*:*:*:*
    • (no CPE)range: <=9.5.2
  • Adobe Inc./Coldfusion3 versions
    cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*range: <=8.0.1
    • cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*
    • (no CPE)range: <=8.0.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.