VendorsAdobecoldfusion2021
Vulnerabilities

Adobe ColdFusion 2021

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

88CVEs
CVE-2025-54261
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2025-09-09 · Analyzed
10.0EPSS 0.213
CVE-2023-29300
Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
Published 2023-07-12 · Analyzed
9.8KEVEPSS 1.000
CVE-2023-26360
Adobe ColdFusion Improper Access Control Arbitrary code execution
Published 2023-03-23 · Analyzed
9.8KEVEPSS 0.973
CVE-2023-38203
Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
Published 2023-07-20 · Analyzed
9.8KEVEPSS 0.971
CVE-2023-44353
ColdFusion WDDX Deserialization Gadgets
Published 2023-11-17 · Modified
9.8EPSS 0.802
CVE-2022-38418
Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability
Published 2022-10-14 · Modified
9.8EPSS 0.800
CVE-2022-35711
Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2022-10-14 · Modified
9.8EPSS 0.735
CVE-2022-35690
Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published 2022-10-14 · Modified
9.8EPSS 0.722
CVE-2023-38204
Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
Published 2023-09-14 · Modified
9.8EPSS 0.662
CVE-2023-44350
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2023-11-17 · Modified
9.8EPSS 0.646
CVE-2023-44351
Adobe ColdFusion RCE Security Vulnerability
Published 2023-11-17 · Modified
9.8EPSS 0.502
CVE-2022-35710
Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability
Published 2022-10-14 · Modified
9.8EPSS 0.426
CVE-2022-35712
Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published 2022-10-14 · Modified
9.8EPSS 0.368
CVE-2024-41874
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2024-09-13 · Analyzed
9.8EPSS 0.303
CVE-2023-26359
Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
Published 2023-03-23 · Analyzed
9.8KEVEPSS 0.170
CVE-2025-49535
ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
Published 2025-07-08 · Analyzed
9.3EPSS 0.006
CVE-2025-43562
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Published 2025-05-13 · Analyzed
9.1EPSS 0.451
CVE-2025-30281
ColdFusion | Improper Access Control (CWE-284)
Published 2025-04-08 · Analyzed
9.1EPSS 0.236
CVE-2025-43561
ColdFusion | Incorrect Authorization (CWE-863)
Published 2025-05-13 · Analyzed
9.1EPSS 0.206
CVE-2025-43560
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-05-13 · Analyzed
9.1EPSS 0.194
CVE-2025-43564
ColdFusion | Incorrect Authorization (CWE-863)
Published 2025-05-13 · Analyzed
9.1EPSS 0.154
CVE-2025-43563
ColdFusion | Improper Access Control (CWE-284)
Published 2025-05-13 · Analyzed
9.1EPSS 0.153
CVE-2025-61808
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Published 2025-12-09 · Analyzed
9.1EPSS 0.106
CVE-2025-24447
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2025-04-08 · Analyzed
9.1EPSS 0.021
CVE-2025-30282
ColdFusion | Improper Authentication (CWE-287)
Published 2025-04-08 · Analyzed
9.1EPSS 0.018
CVE-2025-24446
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-04-08 · Analyzed
9.1EPSS 0.018
CVE-2025-43559
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-05-13 · Analyzed
9.1EPSS 0.015
CVE-2025-61811
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2025-12-09 · Modified
9.1EPSS 0.012
CVE-2025-61809
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-12-09 · Analyzed
9.1EPSS 0.007
CVE-2025-49551
ColdFusion | Use of Hard-coded Credentials (CWE-798)
Published 2025-07-08 · Analyzed
8.8EPSS 0.003
CVE-2025-30290
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2025-04-08 · Analyzed
8.7EPSS 0.195
CVE-2025-30285
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2025-04-08 · Analyzed
8.4EPSS 0.309
CVE-2025-43565
ColdFusion | Incorrect Authorization (CWE-863)
Published 2025-05-13 · Analyzed
8.4EPSS 0.157
CVE-2025-61810
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2025-12-09 · Analyzed
8.4EPSS 0.095
CVE-2025-61812
ColdFusion | Improper Input Validation (CWE-20)
Published 2025-12-09 · Analyzed
8.4EPSS 0.047
CVE-2025-30286
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Published 2025-04-08 · Analyzed
8.4EPSS 0.026
CVE-2025-30284
ColdFusion | Deserialization of Untrusted Data (CWE-502)
Published 2025-04-08 · Analyzed
8.4EPSS 0.021
CVE-2025-30289
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Published 2025-04-08 · Analyzed
8.2EPSS 0.053
CVE-2025-30287
ColdFusion | Improper Authentication (CWE-287)
Published 2025-04-08 · Analyzed
8.2EPSS 0.029
CVE-2025-30288
ColdFusion | Improper Access Control (CWE-284)
Published 2025-04-08 · Analyzed
8.2EPSS 0.003
1 / 3Next →