Intrusion PreventionAdobe.ColdFusion.cf_debugFr.cfm.XSS
Description
This indicates an attack attempt to exploit a Cross-Site Scripting Vulnerability in Adobe ColdFusion.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application while handling maliciously crafted requests. A remote attacker may be able to exploit this to execute arbitrary script code in a user's browser.
Affected Products
Adobe ColdFusion Adobe ColdFusion 2017.011.30161
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://helpx.adobe.com/security/products/acrobat/apsb22-22.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 51536 |
| Created | May 10, 2022 |
| Updated | May 17, 2022 |
| Risk |
|
| CVE ID | CVE-2022-28818 |
| Exploit Prediction Score | 0.08% |
| Default Action | drop |
| Active | |
| Affected OS | All |
| Affected App | Adobe |