Skip to content
OpenAdvisories

Product · Adobe

ColdFusion

110 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.4
    CVE-2024-20767 Exploited Public exploit EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024
  • High 8.6
    CVE-2023-26360 Exploited Public exploit EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • Critical 9.8
    CVE-2018-15961 Exploited Public exploit EPSS 100%

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an un…

    Adobe ColdFusion
    KEV Nov 3, 2021