CO
App Server
ColdFusion
On CISA KEVExploited in the wildRansomware-linked
296
CVEs
17
On KEV
10.0
Max CVSS
30
New 30D
Severity mix
Critical 81High 99Medium 49Low 5
Watch
Add ColdFusion to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-26360 In wildKEV | 8.6 | Mar 23 | Adobe ColdFusion Improper Access Control Arbitrary code execution Affected: through CF2018U15; through CF2021U5; through None |
| CVE-2023-38205 In wildKEV | 7.5 | Sep 14 | ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 Affected: through cf2023U2 |
| CVE-2023-29298 In wildKEV | 7.5 | Jul 12 | Adobe ColdFusion Improper Access Control Security feature bypass Affected: through 2023.0.0.330468 |
| CVE-2013-0629 In wildKEV | 7.5 | Jan 9 | Adobe ColdFusion Directory Traversal Vulnerability Affected: 9.0; 9.0.1; 9.0.2; 10.0 |
| CVE-2013-0631 In wildKEV | 7.5 | Jan 9 | Adobe ColdFusion Information Disclosure Vulnerability Affected: 9.0; 9.0.1; 9.0.2 |
| CVE-2024-20767 In wildKEV | 7.4 | Mar 18 | ColdFusion | Improper Access Control (CWE-284) Affected: through 2021.12 |
Showing 6