Skip to content
OpenAdvisories

Vendor

lucee

5 known vulnerabilities.

Products

Lucee 4 Lucee Server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-29519 Public exploit

    Lucee CFML Server Reflected XSS via URL Path Parsing

    Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser by…

    lucee Lucee
  • High 8.6
    CVE-2021-21307 Public exploit EPSS 89%

    Remote Code Exploit in Lucee Admin

    Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.…

    lucee Lucee