[CVE-2015-0345] Adobe ColdFusion Reflected Cross-Site Scripting Flaw

CVE

CVE-2015-0345

Published

2015-08-27 00:00

Collected

2026-07-08 08:46

---
id: 4269
title: "[CVE-2015-0345] Adobe ColdFusion Reflected Cross-Site Scripting Flaw"
cve: CVE-2015-0345
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/adobe-coldfusion-xss-advisory"
published_at: "2015-08-27T00:00:00Z"
tags: ["xss", "advisory", "adobe", "coldfusion", "cve-2015-0345"]
phying_url: "https://phying.com/item/4269"
lang: en
---

# [CVE-2015-0345] Adobe ColdFusion Reflected Cross-Site Scripting Flaw

## Summary

Advisory for CVE-2015-0345: a reflected XSS in ColdFusion's post-authentication admin panel chains into arbitrary command execution; affected versions 10 and 11; patched April 14, 2015.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2015-0345
- **Published:** 2015-08-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/adobe-coldfusion-xss-advisory
- **Phying News:** https://phying.com/item/4269