CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. Its EPSS score suggests a 13.1% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2007-5905
Severity
MEDIUM
CVSS
6.8
EPSS
13.08%
Original NVD Description
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.