Adobe Jrun vulnerabilities

5 CVEs affecting Adobe Jrun, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1874, published 2009-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1278, published 2007-03-16. Medium severity, CVSS 4.3. EPSS: 23.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1 and 7.0 Enterprise, when using Microsoft IIS 6, allows remote attackers to cause a denial of service…
CVE-2006-5858, published 2006-12-31. Medium severity, CVSS 5.0. EPSS: 13.6% chance of exploitation in the next 30 days. Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte…
CVE-2009-1873, published 2009-08-18. Medium severity, CVSS 4.0. EPSS: 4.7% chance of exploitation in the next 30 days. Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a ..…
CVE-2006-5860, published 2007-02-14. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2009-1874, published 2009-08-18. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.