Adobe ColdFusion 2021

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, such as C:\ColdFusion2021\. By default, unprivileged users can create files in this directory structure, which creates a privilege-escalation vulnerability.

Adobe ColdFusion Improper Access Control Security feature bypass

ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read

Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability

Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read

Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass

Adobe ColdFusion Improper Input Validation Arbitrary file system read

ColdFusion CFDOCUMENT file retrieval / access control bypass

CVE-2023-38205 issues | ColdFusion Admin Panel Access

ColdFusion | Improper Authentication (CWE-287)

ColdFusion | Improper Access Control (CWE-284)

ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)

ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass  

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability

Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion | Improper Input Validation (CWE-20)

ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version

ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution

ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)

ColdFusion | Improper Access Control (CWE-284)

ColdFusion | Weak Cryptography for Passwords (CWE-261)

ColdFusion | Information Exposure (CWE-200)

ColdFusion | Improper Access Control (CWE-284)

ColdFusion | Insufficiently Protected Credentials (CWE-522)

ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability