CVE-2013-0631
Adobe Coldfusion 9.0 … 9.0.2
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSummary
CVE-2013-0631 is a high-severity an unspecified weakness vulnerability in Adobe Coldfusion. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 0.8% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Adobe ColdFusion versions 9.0, 9.0.1, and 9.0.2 contain an unspecified information disclosure vulnerability that can be triggered over the network. The flaw carries a CVSS 3.1 base score of 7.5, reflecting high confidentiality impact with no authentication or user interaction required.
Remote attackers can exploit the weakness to obtain sensitive information from affected servers. Public records indicate the vulnerability was actively exploited in the wild as early as January 2013.
Adobe addressed the issue through security advisories APSA13-01 and APSB13-03, which include mitigation guidance and patch information. The vulnerability is also catalogued by CISA as a known exploited vulnerability, confirming ongoing real-world targeting of unpatched ColdFusion 9 installations.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2013-0642
Vulnerability Data
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
- CWE(s)
- KEV Date Added
- 07 March 2022
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.