VendorsAdobecoldfusion2025
Vulnerabilities

Adobe ColdFusion 2025

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

114CVEs
CVE-2026-71383
ColdFusion | Incorrect Authorization (CWE-863)
Published 2026-08-11 · Analyzed
7.3EPSS 0.006
CVE-2025-49536
ColdFusion | Incorrect Authorization (CWE-863)
Published 2025-07-08 · Analyzed
7.3EPSS 0.003
CVE-2026-83961
ColdFusion | Improper Authentication (CWE-287)
Published 2026-09-03 · Analyzed
7.1EPSS 0.004
CVE-2025-43566
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2025-05-13 · Analyzed
6.8EPSS 0.551
CVE-2025-30294
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-04-08 · Analyzed
6.8EPSS 0.172
CVE-2025-30293
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-04-08 · Analyzed
6.8EPSS 0.008
CVE-2025-49544
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-07-08 · Analyzed
6.8EPSS 0.006
CVE-2025-61821
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-12-09 · Analyzed
6.8EPSS 0.005
CVE-2026-48338
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2026-07-14 · Analyzed
6.8EPSS 0.005
CVE-2026-48375
ColdFusion | Incorrect Authorization (CWE-863)
Published 2026-08-11 · Analyzed
6.5EPSS 0.008
CVE-2026-48314
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2026-06-30 · Analyzed
6.5EPSS 0.006
CVE-2026-76000
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published 2026-09-08 · Analyzed
6.5EPSS 0.004
CVE-2025-61822
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-12-09 · Analyzed
6.2EPSS 0.007
CVE-2025-61823
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-12-09 · Analyzed
6.2EPSS 0.005
CVE-2025-49545
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2025-07-08 · Analyzed
6.2EPSS 0.004
CVE-2025-30292
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2025-04-08 · Analyzed
6.1EPSS 0.155
CVE-2026-76002
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2026-09-08 · Analyzed
6.1EPSS 0.004
CVE-2025-64897
ColdFusion | Improper Access Control (CWE-284)
Published 2025-12-09 · Analyzed
5.6EPSS 0.001
CVE-2025-30291
ColdFusion | Information Exposure (CWE-200)
Published 2025-04-08 · Analyzed
5.5EPSS 0.002
CVE-2026-48376
ColdFusion | Improper Encoding or Escaping of Output (CWE-116)
Published 2026-08-11 · Analyzed
5.4EPSS 0.007
CVE-2026-21269
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-08-11 · Modified
5.4EPSS 0.005
CVE-2025-64898
ColdFusion | Insufficiently Protected Credentials (CWE-522)
Published 2025-12-09 · Analyzed
5.3EPSS 0.004
CVE-2025-49542
ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
Published 2025-07-08 · Analyzed
5.2EPSS 0.011
CVE-2026-48384
ColdFusion | Improper Input Validation (CWE-20)
Published 2026-08-11 · Analyzed
4.9EPSS 0.010
CVE-2026-47933
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-06-09 · Analyzed
4.8EPSS 0.004
CVE-2025-49539
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-07-08 · Analyzed
4.5EPSS 0.005
CVE-2025-49540
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49541
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49543
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-54234
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2025-08-18 · Analyzed
2.7EPSS 0.008
CVE-2026-48329
ColdFusion | Insufficient Session Expiration (CWE-613)
Published 2026-07-14 · Analyzed
2.7EPSS 0.006
CVE-2025-49546
ColdFusion | Improper Access Control (CWE-284)
Published 2025-07-08 · Analyzed
2.4EPSS 0.004
CVE-2026-27307
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published 2026-04-14 · Analyzed
2.4EPSS 0.004
CVE-2026-27308
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published 2026-04-14 · Analyzed
2.4EPSS 0.004
← Prev3 / 3