Skip to contentAdobe Coldfusion vulnerabilities
- adobe coldfusionColdFusion | Insufficiently Protected Credentials (CWE-522)CVE-2025-648985.3 Medium
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2025-61810EPSS 10.2%8.4 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-618099.1 Critical
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2025-648975.6 Medium
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-618226.2 Medium
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)CVE-2025-618236.2 Medium
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-618119.1 Critical
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-54261EPSS 27.0%10.0 Critical
- adobe coldfusionColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2025-542342.7 Low
- adobe coldfusionColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)CVE-2025-495425.2 Medium
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)CVE-2025-495359.3 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)CVE-2025-495367.3 High
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)CVE-2025-495394.5 Medium
- adobe coldfusionColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2025-495456.2 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-495414.3 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2025-495377.9 High
- adobe coldfusionColdFusion | Use of Hard-coded Credentials (CWE-798)CVE-2025-495518.8 High
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2025-495462.4 Low
- adobe coldfusionColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)CVE-2025-495446.8 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-495434.3 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-495404.3 Medium
- adobe coldfusionColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)CVE-2025-495387.4 High
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)CVE-2025-43565EPSS 18.4%8.4 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-435599.1 Critical
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-43566EPSS 58.2%6.8 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2025-43562EPSS 51.0%9.1 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)CVE-2025-43564Public exploitEPSS 16.8%9.1 Critical
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-43560EPSS 22.6%9.1 Critical
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2025-43563EPSS 16.7%9.1 Critical
- adobe coldfusionColdFusion | Incorrect Authorization (CWE-863)CVE-2025-43561EPSS 23.9%9.1 Critical
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)CVE-2025-302878.2 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-302936.8 Medium
- adobe coldfusionColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)CVE-2025-30292EPSS 15.5%6.1 Medium
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-30290EPSS 20.0%8.7 High
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)CVE-2025-302829.1 Critical
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2025-302848.4 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-30294EPSS 17.2%6.8 Medium
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2025-302898.2 High
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2025-302888.2 High
- adobe coldfusionColdFusion | Improper Input Validation (CWE-20)CVE-2025-244469.1 Critical
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2025-244479.1 Critical
- adobe coldfusionColdFusion | Improper Access Control (CWE-284)CVE-2025-30281EPSS 23.6%9.1 Critical
- adobe coldfusionColdFusion | Information Exposure (CWE-200)CVE-2025-302915.5 Medium
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2025-30285EPSS 30.9%8.4 High
- adobe coldfusionColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2025-302868.4 High
- adobe coldfusionColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2024-53961EPSS 14.2%8.1 High
- adobe coldfusionColdFusion | Deserialization of Untrusted Data (CWE-502)CVE-2024-41874EPSS 30.3%9.8 Critical
- adobe coldfusionColdFusion | Improper Authentication (CWE-287)CVE-2024-451137.5 High
- adobe coldfusionColdFusion | Weak Cryptography for Passwords (CWE-261)CVE-2024-341135.5 Medium
- adobe coldfusionColdFusion CFDOCUMENT file retrieval / access control bypassCVE-2024-34112EPSS 23.7%7.5 High
- Show moreLoading…