← Back to browse · API

CVE-2013-0625

Severity
CRITICAL
CVSS
9.8
EPSS
0.93797
Risk score
57.83
CISA KEV
Yes
PoC
No
Published
2013-01-09
Modified
2025-10-22
First seen
2026-08-07
Aliases
EUVD-2013-0636, GHSA-MHWW-RMFC-8PRF
Products
Adobe:ColdFusion, n/a:n/a n/a
Sources
cisa.gov CVE-2013-0625
euvd EUVD-2013-0636

Description

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013.

References