Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
adobe coldfusion 2018 vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2019-7840
ColdFusion versions Update 3 and previous versions, Update 10 and previous versions, and Update 18 and previous versions have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 11.0
Adobe Coldfusion 2016
Adobe Coldfusion 2018
1 Article
10
CVSSv2
CVE-2019-7816
ColdFusion versions Update 2 and previous versions, Update 9 and previous versions, and Update 17 and previous versions have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
Adobe Coldfusion 11.0
1 Article
3.5
CVSSv2
CVE-2021-21087
Adobe Coldfusion versions 2016 (update 16 and previous versions), 2018 (update 10 and previous versions) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse th...
Adobe Coldfusion 2018
Adobe Coldfusion 2016
Adobe Coldfusion 2021.0.0.323925
10
CVSSv2
CVE-2019-7839
ColdFusion versions Update 3 and previous versions, Update 10 and previous versions, and Update 18 and previous versions have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 11.0
Adobe Coldfusion 2016
Adobe Coldfusion 2018
1 Article
6.4
CVSSv2
CVE-2018-15960
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and previous versions, and Update 14 and previous versions have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite.
Adobe Coldfusion 11.0
Adobe Coldfusion 2016
Adobe Coldfusion 2018
10
CVSSv2
CVE-2019-7091
ColdFusion versions Update 1 and previous versions, Update 7 and previous versions, and Update 15 and previous versions have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 11.0
Adobe Coldfusion 2018
Adobe Coldfusion 2016
4.3
CVSSv2
CVE-2019-7092
ColdFusion versions Update 1 and previous versions, Update 7 and previous versions, and Update 15 and previous versions have a cross site scripting vulnerability. Successful exploitation could lead to information disclosure .
Adobe Coldfusion 2016
Adobe Coldfusion 11.0
Adobe Coldfusion 2018
NA
CVE-2022-42340
Adobe ColdFusion versions Update 14 (and previous versions) and Update 4 (and previous versions) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.
Adobe Coldfusion 2018
Adobe Coldfusion 2021
NA
CVE-2022-42341
Adobe ColdFusion versions Update 14 (and previous versions) and Update 4 (and previous versions) are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary file system read. Exploitation of this issue do...
Adobe Coldfusion 2018
Adobe Coldfusion 2021
NA
CVE-2023-26359
Adobe ColdFusion versions 2018 Update 15 (and previous versions) and 2021 Update 5 (and previous versions) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu...
Adobe Coldfusion 2018
Adobe Coldfusion 2021
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073
CVE-2024-5496
CVE-2024-5495
XPath injection
bypass
CVE-2024-30043
CVE-2024-24919
denial of service
CVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »