Vulnerability in Macromedia Coldfusion
CVE-2004-2331
ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject…
EPSS: 0.007 (47.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Macromedia Coldfusion — versions 6.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (URL Repurposed, x_refsource_SECUNIA, third-party-advisory)
Frequently asked questions
- What is CVE-2004-2331?
- CVE-2004-2331 is a medium-severity vulnerability in Macromedia Coldfusion, classified under Use of Externally-Controlled Input to Select Classes or Code (Unsafe Reflection). CVSS score: 5.5/10. Published 2004-12-31.
- How severe is CVE-2004-2331?
- Medium severity. CVSS v3 base score is 5.5 out of 10.