Adobe ColdFusion Information Disclosure Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 8, 2013 · Catalog

   Detected

   Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

2. Mar 7, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Sep 7, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

Affected

• cpe adobe/coldfusion9.0
• cpe adobe/coldfusion9.0.1
• cpe adobe/coldfusion9.0.2
• vendor Adobe ColdFusionversion unspecified
• vendor n/a n/aversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2013-0631

  Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

  cisa.gov
• CVE.orgVulnerability recordCVE-2013-0631

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

  cve.org
• FIRST EPSSExploitation probabilityCVE-2013-0631

  30-day exploitation probability 66.4%

  first.org
• NIST NVDVulnerability recordCVE-2013-0631

  Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.

  nvd.nist.gov

References

• Vendor Advisory · adobe.com
• Not Applicable · adobe.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov