CVE-2013-0625

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jan 9, 2013

Updated: Dec 20, 2024

CWE ID 287

Summary

CVE-2013-0625 is a vulnerability affecting Adobe ColdFusion 9.0, 9.0.1, and 9.0.2. When no password is configured, this issue allows remote attackers to bypass authentication and potentially execute arbitrary code. This vulnerability, which was exploited in the wild in January 2013, remains a significant security concern for organizations using these versions of Adobe ColdFusion.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Adobe ColdFusion

Affected Vendors

Adobe

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/KADx5C
https://www.cve.org/CVERecord?id=CVE-2013-0625
https://nvd.nist.gov/vuln/detail/CVE-2013-0625

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners