CVE-2006-6483

LOW · CVSS 2.6 EPSS 2.31%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-12-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-6483

Severity

LOW

CVSS

2.6

EPSS

2.31%

Original NVD Description

Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (XSS) attacks, which allows remote attackers to inject arbitrary web script or HTML via a NULL byte (%00) in certain HTML tags, as demonstrated using "%00script" in a tag.