Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2012-2048: Adobe ColdFusion 10 can be crashed by attackers

CVE-2012-2048 · published 14 years ago

Summary

Versions of Adobe ColdFusion up through 10 may let a remote user cause the server to stop responding, making the website unavailable. This happens through unknown methods, so any public-facing ColdFusion site could be affected. Apply the latest security update from Adobe or upgrade to a newer version as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
adobe	coldfusion	<= 10.0 8.0 8.0.1 9.0 9.0.1 9.0.2 `cpe:2.3:a:adobe:coldfusion::::::::`

Original advisory text

Unspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial of service via unknown vectors.

References

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.0 Medium

Exploitation

4% chance of attack within 30 days

Timeline

Published12 Sep 2012

Updated22 Oct 2026

First seen29 Sep 2026

Sources

CVE-2012-2048 · NVD

Track software like this

Free during beta