Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
adobe coldfusion vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2008-1203
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote malicious users to conduct brute force attacks without detection.
Adobe Coldfusion 8.0
Adobe Coldfusion 7.0
7.8
CVSSv3
CVE-2020-9673
Adobe ColdFusion 2016 update 15 and previous versions versions, and ColdFusion 2018 update 9 and previous versions versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
NA
CVE-2006-4725
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox.
Adobe Coldfusion 7.0
Adobe Coldfusion 7.0.1
7.8
CVSSv3
CVE-2020-3768
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
9.8
CVSSv3
CVE-2020-3794
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
6.5
CVSSv3
CVE-2020-3796
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
9.8
CVSSv3
CVE-2019-8073
ColdFusion 2018- update 4 and previous versions and ColdFusion 2016- update 11 and previous versions have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code execution in the context of the current user.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
1 Article
9.8
CVSSv3
CVE-2019-8074
ColdFusion 2018- update 4 and previous versions and ColdFusion 2016- update 11 and previous versions have a Path Traversal vulnerability. Successful exploitation could lead to Access Control Bypass in the context of the current user.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
1 Article
NA
CVE-2008-1656
Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote malicious users to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725.
Adobe Coldfusion 8.0
Adobe Coldfusion 8.1
9.8
CVSSv3
CVE-2022-35690
Adobe ColdFusion versions Update 14 (and previous versions) and Update 4 (and previous versions) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not requi...
Adobe Coldfusion 2018
Adobe Coldfusion 2021
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-6280
CVE-2024-5346
CVE-2024-30078
CVE-2022-45803
CVE-2024-36886
SQL
CVE-2024-24553
IMAP
memory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
5
6
7
8
9
10
NEXT »