CVE-2004-0928: Hitachi Cosminexus Enterprise

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".

Affected products

• Hitachi Cosminexus Enterprise: version 01_01_1 only; version 01_02_2 only
• Hitachi Cosminexus Server: version web_01-01_1 only; version web_01-01_2 only
• Macromedia ColdFusion: version 6.0 only; version 6.1 only
• Macromedia Jrun: version 3.0 only; version 3.1 only; version 4.0 only

Published 2004-10-05. Last modified 2026-06-16.