{"id":"CVE-2010-2861","aliases":[],"url":"https://o3.security/vulnerability/CVE-2010-2861","summary":"Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter…","details":"Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.","published":"2010-08-11T18:47:51.157","modified":"2026-08-14T05:16:51.440","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.99721,"percentile":0.99951,"asOf":"2026-09-05"},"cisaKev":null,"exploitsKnown":5,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://securityreason.com/securityalert/8137"},{"type":"WEB","url":"http://securityreason.com/securityalert/8148"},{"type":"ADVISORY","url":"http://www.adobe.com/support/security/bulletins/apsb10-18.html"},{"type":"EXPLOIT","url":"http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"},{"type":"WEB","url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"},{"type":"WEB","url":"http://securityreason.com/securityalert/8137"},{"type":"WEB","url":"http://securityreason.com/securityalert/8148"},{"type":"ADVISORY","url":"http://www.adobe.com/support/security/bulletins/apsb10-18.html"},{"type":"EXPLOIT","url":"http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"},{"type":"WEB","url":"http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-14T05:16:51.440"}}