← Database

CVE-2007-0817

MEDIUM CVSS: 4.3 Published: 2007-02-07 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.

Affected Platforms

Adobe Coldfusion

Weakness Type

NVD-CWE-Other

References