Servers and applications
CVE-2010-0185
The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL.
- Severity
- Medium 5.0
- Published
- 3 Feb 2010
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 4.4% in the next 30 daysHigher than 91% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-264
- Attack
- Over the network · No login needed
- Attacker can
- Read some data
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Adobe ColdFusionServers and applications · cpe:a:adobe:coldfusion |
|