CVE-2016-4159
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-4159
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe ColdFusion 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe ColdFusion是美国奥多比（Adobe）公司的一款动态Web服务器产品，其运行的CFML（ColdFusion Markup Language）是针对Web应用的一种程序设计语言。 Adobe ColdFusion中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。以下版本受到影响：Adobe ColdFusion (2016 release) Update 1版本，11 Update 8及之前版本，10 Update 19及之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2016-4159
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-4159
请登录查看更多情报信息。
- https://helpx.adobe.com/security/products/coldfusion/apsb16-22.htmlx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2016-4159
Same Patch Batch · n/a · 2016-06-16 · 94 CVEs total
| CVE-2016-0200 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0025 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-4171 | Adobe Flash Player 安全漏洞 | |
| CVE-2016-4164 | Adobe Brackets 跨站脚本漏洞 | |
| CVE-2016-4163 | 多款Adobe产品安全漏洞 | |
| CVE-2016-4162 | 多款Adobe产品安全漏洞 | |
| CVE-2016-4161 | 多款Adobe产品安全漏洞 | |
| CVE-2016-4160 | 多款Adobe产品安全漏洞 | |
| CVE-2016-4165 | Adobe Brackets 输入验证漏洞 | |
| CVE-2016-0199 | Microsoft Internet Explorer 内存损坏漏洞 | |
| CVE-2016-0028 | Microsoft Exchange 信息泄漏漏洞 | |
| CVE-2016-3198 | Microsoft Edge 安全功能绕过漏洞 | |
| CVE-2016-3199 | Microsoft Edge Chakra JavaScript脚本引擎内存损坏漏洞 | |
| CVE-2016-3201 | Microsoft Windows和Microsoft Edge PDF 信息泄露漏洞 | |
| CVE-2016-3202 | Microsoft 脚本引擎内存损坏漏洞 | |
| CVE-2016-3203 | Microsoft Windows和Microsoft Edge PDF 远程代码执行漏洞 | |
| CVE-2016-3205 | Microsoft Internet Explorer 脚本引擎内存损坏漏洞 | |
| CVE-2016-3206 | Microsoft Internet Explorer 脚本引擎内存损坏漏洞 | |
| CVE-2016-3207 | Microsoft Internet Explorer 脚本引擎内存损坏漏洞 | |
| CVE-2016-3210 | Microsoft Internet Explorer 脚本引擎内存损坏漏洞 |
Showing top 20 of 94 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2016-4159
No comments yet