CVE-2013-0629

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 16, 2026

Description

Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.adobe.com/support/security/advisories/apsa13-01.htmlVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.htmlNot Applicable
http://www.securityfocus.com/bid/57165Broken Link, Third Party Advisory, VDB Entry
http://www.adobe.com/support/security/advisories/apsa13-01.htmlVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb13-03.htmlNot Applicable
http://www.securityfocus.com/bid/57165Broken Link, Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0629US Government Resource

Timeline

Published: Jan 9, 2013
Last modified: Jun 16, 2026
Added to CISA KEV: Mar 7, 2022
NVD status: Analyzed

Related CVEs from 2013

CVE-2013-063010.0Buffer overflow in Adobe Flash Player before 10.3.183.50 and 11.x before 11.5.502.146 on Windows and Mac OS X, before 10.3.183.50 and 11.x b CVE-2013-06317.5Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in CVE-2013-06329.8administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitr CVE-2013-06339.3Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x b CVE-2013-06349.3Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 CVE-2013-063510.0Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns CVE-2013-063610.0Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors.CVE-2013-06375.0Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, CVE-2013-063810.0Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, CVE-2013-063910.0Integer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.6 CVE-2013-06407.8Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or c CVE-2013-06417.8Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute