VendorsAdobecoldfusion2023
Vulnerabilities

Adobe ColdFusion 2023

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

132CVEs
CVE-2026-48384
ColdFusion | Improper Input Validation (CWE-20)
Published 2026-08-11 · Analyzed
4.9EPSS 0.010
CVE-2026-47933
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-06-09 · Analyzed
4.8EPSS 0.004
CVE-2025-49539
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-07-08 · Analyzed
4.5EPSS 0.005
CVE-2023-44355
ColdFusion | Improper Input Validation (CWE-20)
Published 2023-11-17 · Modified
4.3EPSS 0.472
CVE-2025-49540
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49541
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-49543
ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-07-08 · Analyzed
4.3EPSS 0.007
CVE-2025-54234
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2025-08-18 · Analyzed
2.7EPSS 0.008
CVE-2026-48329
ColdFusion | Insufficient Session Expiration (CWE-613)
Published 2026-07-14 · Analyzed
2.7EPSS 0.006
CVE-2025-49546
ColdFusion | Improper Access Control (CWE-284)
Published 2025-07-08 · Analyzed
2.4EPSS 0.004
CVE-2026-27307
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published 2026-04-14 · Analyzed
2.4EPSS 0.004
CVE-2026-27308
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published 2026-04-14 · Analyzed
2.4EPSS 0.004
← Prev4 / 4