Skip to contentAdobe Coldfusion vulnerabilities
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2024-20767In KEVPublic exploitEPSS 98.5%7.4 High
- adobe coldfusionAdobe ColdFusion RCE Security VulnerabilityCVE-2023-44351EPSS 50.2%9.8 Critical
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2023-44355EPSS 47.2%4.3 Medium
- adobe coldfusionCVE-2023-38205 issues | ColdFusion Admin Panel AccessCVE-2023-26347EPSS 10.1%7.5 High
- adobe coldfusionColdFusion WDDX Deserialization GadgetsCVE-2023-44353EPSS 80.2%9.8 Critical
- adobe coldfusionUnauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last versionCVE-2023-44352EPSS 84.8%6.1 Medium
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2023-44350EPSS 64.6%9.8 Critical
- adobe coldfusionBypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8CVE-2023-38204EPSS 69.7%9.8 Critical
- adobe coldfusionColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298CVE-2023-38205In KEVEPSS 99.8%7.5 High
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2023-382065.3 Medium
- adobe coldfusionColdFusion CFIDE Improper Access Control Leads To Privilege EscalationCVE-2021-406997.4 High
- adobe coldfusionColdFusion Use of Inherently Dangerous Function Leads To Security feature bypassCVE-2021-406987.4 High
- adobe coldfusionAnalysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCECVE-2023-38203In KEVEPSS 97.1%9.8 Critical
- adobe coldfusionAdobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionCVE-2023-29300In KEVEPSS 100.0%9.8 Critical
- adobe coldfusionAdobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypassCVE-2023-29301EPSS 34.7%7.5 High
- adobe coldfusionAdobe ColdFusion Improper Access Control Security feature bypassCVE-2023-29298In KEVEPSS 99.8%7.5 High
- adobe coldfusionAdobe ColdFusion Directory Traversal Arbitrary file system read VulnerabilityCVE-2023-26361EPSS 58.7%4.9 Medium
- adobe coldfusionAdobe ColdFusion Improper Access Control Arbitrary code executionCVE-2023-26360In KEVPublic exploitEPSS 97.3%8.6 High
- adobe coldfusionAdobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionCVE-2023-26359In KEVEPSS 17.0%9.8 Critical
- adobe coldfusionAdobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system readCVE-2022-42341EPSS 36.3%7.5 High
- adobe coldfusionAdobe ColdFusion Improper Input Validation Arbitrary file system readCVE-2022-42340EPSS 34.6%7.5 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Arbitrary file system writeCVE-2022-38424EPSS 45.8%7.2 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityCVE-2022-38423EPSS 45.7%4.9 Medium
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Information Disclosure VulnerabilityCVE-2022-38422EPSS 44.9%7.5 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityCVE-2022-38421EPSS 79.6%7.2 High
- adobe coldfusionAdobe ColdFusion Use of Hard-coded Credentials Application denial-of-serviceCVE-2022-38420EPSS 44.7%7.5 High
- adobe coldfusionAdobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system readCVE-2022-38419EPSS 53.7%7.5 High
- adobe coldfusionAdobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2022-35711EPSS 74.1%9.8 Critical
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Remote Code Execution VulnerabilityCVE-2022-38418EPSS 80.4%9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2022-35712EPSS 37.6%9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2022-35710EPSS 43.5%9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2022-35690EPSS 72.7%9.8 Critical
- adobe coldfusionColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code ExecutionCVE-2022-28818EPSS 44.8%6.1 Medium
- adobe coldfusionThe Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default...CVE-2020-101457.8 High
- adobe coldfusionColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browserCVE-2021-21087EPSS 37.1%5.4 Medium
- adobe coldfusion 2016, coldfusion 2018, coldfusion +2 moreAdobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier...CVE-2020-96737.8 High
- adobe coldfusion 2016, coldfusion 2018, coldfusion +2 moreAdobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier...CVE-2020-96727.8 High
- adobe coldfusionColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control...CVE-2020-37966.5 Medium
- adobe coldfusionColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking...CVE-2020-37687.8 High
- adobe coldfusionColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation...CVE-2020-37676.5 Medium
- adobe coldfusionColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability....CVE-2020-37949.8 Critical
- adobe coldfusionColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability....CVE-2020-37617.5 High
- adobe coldfusionColdFusion versions Update 6 and earlier have an insecure inherited permissions of default...CVE-2019-82569.8 Critical
- adobe coldfusion, cold fusion +1 moreColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path...CVE-2019-8074EPSS 18.9%9.8 Critical
- adobe coldfusion, cold fusion +1 moreColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command...CVE-2019-80739.8 Critical
- adobe coldfusion, cold fusion +1 moreColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security...CVE-2019-80727.5 High
- adobe coldfusionColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a...CVE-2019-7840EPSS 17.2%9.8 Critical
- adobe coldfusionColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a...CVE-2019-7839Public exploitEPSS 44.1%9.8 Critical
- adobe coldfusionColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a...CVE-2019-7838EPSS 17.4%9.8 Critical
- adobe coldfusionColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a...CVE-2019-70926.1 Medium
- Show moreLoading…