VendorsAdobecoldfusion2021
Vulnerabilities

Adobe ColdFusion 2021

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

88CVEs
CVE-2022-38423
Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability
Published 2022-10-14 · Modified
4.9EPSS 0.450
CVE-2025-49539
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-07-08 · Analyzed
4.5EPSS 0.005
CVE-2023-44355
ColdFusion | Improper Input Validation (CWE-20)
Published 2023-11-17 · Modified
4.3EPSS 0.472
CVE-2025-49540
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49541
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49543
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-54234
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2025-08-18 · Analyzed
2.7EPSS 0.008
CVE-2025-49546
ColdFusion | Improper Access Control (CWE-284)
Published 2025-07-08 · Analyzed
2.4EPSS 0.004
← Prev3 / 3