CVE-2008-1202

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-12 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected products

Adobe Livecycle Workflow: 6.2

References

http://secunia.com/advisories/29331
http://securityreason.com/securityalert/3729
http://www.adobe.com/support/security/bulletins/apsb08-10.html
http://www.liquidmatrix.org/blog/2008/03/11/advisory-adobe-livecycle-workflow-xss-vulnerability/
http://www.securityfocus.com/archive/1/489413/100/0/threaded
http://www.securityfocus.com/bid/28209
http://www.securitytracker.com/id?1019588
http://www.vupen.com/english/advisories/2008/0864/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41143
http://secunia.com/advisories/29331
http://securityreason.com/securityalert/3729
http://www.adobe.com/support/security/bulletins/apsb08-10.html

Get alerted when CVE-2008-1202 or the next vulnerability affects your stack