CVE-2014-2868

HIGH · CVSS 7.5 EPSS 3.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-04-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-2868

Severity

HIGH

CVSS

7.5

EPSS

3.35%

Original NVD Description

PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.