Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
coldfusion vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-2008-4831
Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors.
Adobe Coldfusion 8.0
Adobe Coldfusion 8.0.1
Adobe Coldfusion 7.2
NA
CVE-2023-38206
Adobe ColdFusion versions 2018u18 (and previous versions), 2021u8 (and previous versions) and 2023u2 (and previous versions) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a...
Adobe Coldfusion 2018
Adobe Coldfusion 2021
Adobe Coldfusion 2023
4.3
CVSSv2
CVE-2017-3008
Adobe ColdFusion 2016 Update 3 and previous versions, ColdFusion 11 update 11 and previous versions, ColdFusion 10 Update 22 and previous versions have a reflected cross-site scripting vulnerability.
Adobe Coldfusion 10.0
Adobe Coldfusion 11.0
Adobe Coldfusion 2016
3.5
CVSSv2
CVE-2021-21087
Adobe Coldfusion versions 2016 (update 16 and previous versions), 2018 (update 10 and previous versions) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse th...
Adobe Coldfusion 2018
Adobe Coldfusion 2016
Adobe Coldfusion 2021.0.0.323925
10
CVSSv2
CVE-2019-7839
ColdFusion versions Update 3 and previous versions, Update 10 and previous versions, and Update 18 and previous versions have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 11.0
Adobe Coldfusion 2016
Adobe Coldfusion 2018
1 Article
5
CVSSv2
CVE-2013-0631
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows malicious users to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.
Adobe Coldfusion 9.0
Adobe Coldfusion 9.0.1
Adobe Coldfusion 9.0.2
4.3
CVSSv2
CVE-2007-0817
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote malicious users to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
Adobe Coldfusion 7.0.1
Adobe Coldfusion 7.0.2
Adobe Coldfusion 6.1
1 EDB exploit
10
CVSSv2
CVE-2019-7816
ColdFusion versions Update 2 and previous versions, Update 9 and previous versions, and Update 17 and previous versions have a file upload restriction bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Adobe Coldfusion 2018
Adobe Coldfusion 2016
Adobe Coldfusion 11.0
1 Article
2.6
CVSSv2
CVE-2006-4726
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 up to and including 7.02 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page.
Adobe Coldfusion 6.1
Adobe Coldfusion 7.0.1
Adobe Coldfusion 7.0
NA
CVE-2023-38203
Adobe ColdFusion versions 2018u17 (and previous versions), 2021u7 (and previous versions) and 2023u1 (and previous versions) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir...
Adobe Coldfusion 2018
Adobe Coldfusion 2021
Adobe Coldfusion 2023
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
administrator privileges
CVE-2024-1579
hardcoded
CVE-2023-20198
CVE-2024-33587
CVE-2024-33449
CVE-2024-4308
HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »