VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 15, 2021· Updated Jun 17, 2026

CVE-2021-21087

CVE-2021-21087

Description

Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.

Affected products

31
  • Adobe Inc./Coldfusion31 versions
    cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*+ 30 more
    • cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update14:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update15:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update16:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2021.0.0.323925:*:*:*:*:*:*:*
    • (no CPE)range: 2016 <= update 16, 2018 <= update 10, 2021.0.0.323925
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.