Skip to content
OpenAdvisories

Product · Adobe

ColdFusion 2025

96 known vulnerabilities.

3 results · Clear filters · Feed

  • Low 2.7

    ColdFusion | Insufficient Session Expiration (CWE-613)

    ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitatio…

  • Low 2.4

    ColdFusion | Uncontrolled Resource Consumption (CWE-400)

    ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, redu…

  • Low 2.4

    ColdFusion | Uncontrolled Resource Consumption (CWE-400)

    ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, redu…