Skip to content

Adobe Coldfusion vulnerabilities

adobe coldfusionAdobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting...CVE-2012-56754.4 MediumDecember 12, 2012
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information...CVE-2012-56747.1 HighNovember 20, 2012
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 10 and earlier allows attackers to cause a denial...CVE-2012-20485.0 MediumSeptember 12, 2012
adobe coldfusionCRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1...CVE-2012-20414.3 MediumJune 13, 2012
adobe coldfusionAdobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without...CVE-2012-07705.0 MediumMarch 13, 2012
adobe coldfusionCross-site scripting (XSS) vulnerability in Remote Development Services (RDS) in Adobe ColdFusion...CVE-2011-43684.3 MediumDecember 14, 2011
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote...CVE-2011-24634.3 MediumDecember 14, 2011
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers...CVE-2011-20915.0 MediumJune 16, 2011
adobe coldfusionCross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1...CVE-2011-06296.8 MediumJune 16, 2011
adobe coldfusionSession fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to...CVE-2011-05844.3 MediumFebruary 10, 2011
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote...CVE-2011-05834.3 MediumFebruary 10, 2011
adobe coldfusionUnspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1...CVE-2011-05825.0 MediumFebruary 10, 2011
adobe coldfusionMultiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote...CVE-2011-05814.3 MediumFebruary 10, 2011
adobe coldfusionMultiple cross-site scripting (XSS) vulnerabilities in the administrator console in Adobe...CVE-2011-05804.3 MediumFebruary 10, 2011
adobe coldfusion** DISPUTED ** Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain...CVE-2011-0737Disputed5.0 MediumFebruary 1, 2011
adobe coldfusion** DISPUTED ** Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to...CVE-2011-0736Disputed4.3 MediumFebruary 1, 2011
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote...CVE-2011-07354.3 MediumFebruary 1, 2011
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote...CVE-2011-07344.3 MediumFebruary 1, 2011
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote...CVE-2011-07334.3 MediumFebruary 1, 2011
adobe coldfusionMultiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0...CVE-2010-2861In KEVPublic exploitEPSS 99.7%9.8 CriticalAugust 11, 2010
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain...CVE-2010-12942.1 LowMay 13, 2010
adobe coldfusionCross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1...CVE-2010-12934.3 MediumMay 13, 2010
adobe coldfusionCross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1,...CVE-2009-34674.3 MediumMay 13, 2010
adobe blazeds, coldfusion, flex data services +2 more +4 moreUnspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0,...CVE-2009-3960In KEVPublic exploitEPSS 90.1%6.5 MediumFebruary 15, 2010
adobe coldfusionThe default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that...CVE-2010-01855.0 MediumFebruary 3, 2010
adobe coldfusionSession fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to...CVE-2009-18785.8 MediumAugust 18, 2009
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote...CVE-2009-18774.3 MediumAugust 18, 2009
adobe coldfusionAdobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via...CVE-2009-18765.0 MediumAugust 18, 2009
adobe coldfusionMultiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow...CVE-2009-18754.3 MediumAugust 18, 2009
adobe coldfusionMultiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and...CVE-2009-1872Public exploitEPSS 16.1%4.3 MediumAugust 18, 2009
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local...CVE-2008-48317.2 HighNovember 10, 2008
adobe coldfusionAdobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods,...CVE-2008-16567.5 HighApril 9, 2008
adobe coldfusionThe administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed...CVE-2008-1203EPSS 15.5%7.5 HighMarch 12, 2008
adobe coldfusionAdobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting...CVE-2008-06445.0 MediumMarch 12, 2008
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote...CVE-2008-06434.3 MediumMarch 12, 2008
adobe coldfusionAdobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors...CVE-2007-5905EPSS 13.1%6.8 MediumNovember 15, 2007
adobe coldfusionAdobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and...CVE-2007-18747.2 HighApril 11, 2007
adobe coldfusion, jrun +1 moreUnspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1...CVE-2007-1278EPSS 23.3%4.3 MediumMarch 16, 2007
adobe coldfusion, jrun +1 moreCross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used...CVE-2006-58604.3 MediumFebruary 14, 2007
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global...CVE-2006-58594.3 MediumFebruary 14, 2007
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers...CVE-2007-0817Public exploit4.3 MediumFebruary 7, 2007
adobe coldfusion, jrun +1 moreAdobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote...CVE-2006-5858EPSS 13.6%5.0 MediumDecember 31, 2006
adobe coldfusionAdobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against...CVE-2006-64832.6 LowDecember 12, 2006
adobe coldfusionAdobe ColdFusion MX7 allows remote attackers to obtain sensitive information via a URL request (1...CVE-2006-64825.0 MediumDecember 12, 2006
adobe coldfusionUnspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7...CVE-2006-39784.6 MediumOctober 10, 2006
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote...CVE-2006-47262.6 LowSeptember 14, 2006
adobe coldfusionAdobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call...CVE-2006-47254.6 MediumSeptember 14, 2006
adobe coldfusionUnspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7...CVE-2006-47245.0 MediumSeptember 14, 2006