Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Adobe
Coldfusion

Adobe Coldfusion vulnerabilities

Known exploitedIn KEVPublic exploitFix available

adobe coldfusionColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a...CVE-2019-7091EPSS 25.7%9.8 CriticalMay 24, 2019
adobe coldfusionColdFusion versions Update 2 and earlier, Update 9 and earlier, and Update 17 and earlier have a...CVE-2019-7816EPSS 67.8%9.8 CriticalMay 24, 2019
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-15965EPSS 25.9%9.8 CriticalSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-159647.5 HighSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-159635.3 MediumSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-159625.3 MediumSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-15961In KEVPublic exploitEPSS 100.0%9.8 CriticalSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-159607.5 HighSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-15959EPSS 25.9%9.8 CriticalSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-15958EPSS 25.9%9.8 CriticalSeptember 25, 2018
adobe coldfusionAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14...CVE-2018-15957EPSS 28.2%9.8 CriticalSeptember 25, 2018
adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...CVE-2018-49427.5 HighMay 19, 2018
adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...CVE-2018-49416.1 MediumMay 19, 2018
adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...CVE-2018-49406.1 MediumMay 19, 2018
adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...CVE-2018-4939In KEVEPSS 61.8%9.8 CriticalMay 19, 2018
adobe coldfusionAdobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have...CVE-2018-49387.8 HighMay 19, 2018
adobe coldfusionAdobe ColdFusion has an XML external entity (XXE) injection vulnerability. This affects Update 4...CVE-2017-112867.5 HighDecember 1, 2017
adobe coldfusionAdobe ColdFusion has a cross-site scripting (XSS) vulnerability. This affects Update 4 and...CVE-2017-112856.1 MediumDecember 1, 2017
adobe coldfusionAdobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and...CVE-2017-11284EPSS 42.7%9.8 CriticalDecember 1, 2017
adobe coldfusionAdobe ColdFusion has an Untrusted Data Deserialization vulnerability. This affects Update 4 and...CVE-2017-11283EPSS 42.7%9.8 CriticalDecember 1, 2017
adobe coldfusionAdobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10...CVE-2017-3066In KEVPublic exploitEPSS 90.6%9.8 CriticalApril 27, 2017
adobe coldfusionAdobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10...CVE-2017-30086.1 MediumApril 27, 2017
adobe coldfusion builderAdobe ColdFusion Builder versions 2016 update 2 and earlier, 3.0.3 and earlier have an important...CVE-2016-78877.5 HighDecember 15, 2016
adobe coldfusionThe Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update...CVE-2016-4264Public exploitEPSS 69.0%8.6 HighSeptember 1, 2016
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before...CVE-2016-41596.1 MediumJune 16, 2016
adobe coldfusionAdobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles...CVE-2016-11155.9 MediumMay 11, 2016
adobe coldfusionAdobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote...CVE-2016-11149.8 CriticalMay 11, 2016
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before...CVE-2016-11136.1 MediumMay 11, 2016
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before...CVE-2015-80534.3 MediumNovember 18, 2015
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before...CVE-2015-80524.3 MediumNovember 18, 2015
adobe coldfusion, livecycle data services, hp xp7 command view advanced edition +1 more +3 moreAdobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle...CVE-2015-52554.3 MediumNovember 18, 2015
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before...CVE-2015-0345Public exploit4.3 MediumApril 15, 2015
adobe coldfusionAdobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of...CVE-2014-91665.0 MediumDecember 10, 2014
adobe coldfusionAdobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before...CVE-2014-05724.6 MediumOctober 15, 2014
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before...CVE-2014-05714.3 MediumOctober 15, 2014
adobe coldfusionCross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1...CVE-2014-05706.8 MediumOctober 15, 2014
adobe acrobat, coldfusion +1 moreCross-site scripting (XSS) vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and...CVE-2014-53154.3 MediumSeptember 26, 2014
adobe coldfusionAdobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via...CVE-2013-53287.8 HighNovember 13, 2013
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before...CVE-2013-53263.5 LowNovember 13, 2013
adobe coldfusionThe authentication process in Adobe ColdFusion before 10 does not require knowledge of the...CVE-2010-529010.0 HighSeptember 20, 2013
adobe coldfusionAdobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC)...CVE-2013-335010.0 HighJuly 10, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 through 9.0.2, when the JRun application server...CVE-2013-33495.0 MediumJuly 10, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 before Update 11, 9.0.1 before Update 10, 9.0.2...CVE-2013-138910.0 HighMay 16, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers...CVE-2013-3336Public exploitEPSS 74.3%5.0 MediumMay 9, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2...CVE-2013-13887.5 HighApril 10, 2013
adobe coldfusionUnspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2...CVE-2013-13877.5 HighApril 10, 2013
adobe coldfusionadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass...CVE-2013-0632In KEVPublic exploitEPSS 93.1%9.8 CriticalJanuary 17, 2013
adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via...CVE-2013-0631In KEVEPSS 66.4%7.5 HighJanuary 9, 2013
adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers...CVE-2013-0629In KEVPublic exploitEPSS 65.8%7.5 HighJanuary 9, 2013
adobe coldfusionAdobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote...CVE-2013-0625In KEVPublic exploitEPSS 93.8%9.8 CriticalJanuary 9, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open