Skip to content
OpenAdvisories

Product · Adobe

ColdFusion

110 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-54234

    ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to limited file system read. A high-privilege authenticated attacker can force the application to make arbitrary reques…

    Adobe ColdFusion
  • Low 2.4
    CVE-2025-49546

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access Control vulnerability that could lead to a partial application denial-of-service. A high-privileged attacker could exploit this vulnerability to partially disrupt the …

    Adobe ColdFusion