ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…

ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion | Incorrect Authorization (CWE-863)

The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability

Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion | Uncontrolled Resource Consumption (CWE-400)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion | Improper Access Control (CWE-284)

ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation

ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication…

Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read

Adobe ColdFusion Improper Input Validation Arbitrary file system read

Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability

Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read

Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability

ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Security bypass vulnerability

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability

Adobe ColdFusion has an XML external entity (XXE) injection vulnerability

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE…

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security…

ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass

Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write

Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion | Improper Authentication (CWE-287)