Adobe ColdFusion vulnerabilities
110 published CVEs name Adobe ColdFusion among the affected products; CISA lists 8 of them as exploited in the wild.
- 110Published CVEs110 of them scored
- 11Last 12 monthspublished in the last year
- 40Critical38 more rated high
- 8Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2024-20767
ColdFusion | Improper Access Control (CWE-284)
Adobe · ColdFusion
ExploitedHigh7.4 - CVE-2023-38203
Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
Adobe · ColdFusion
ExploitedCritical9.8 - CVE-2023-29300
Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
Adobe · ColdFusion
ExploitedCritical9.8 - CVE-2023-26359
Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
Adobe · ColdFusion
ExploitedCritical9.8 - CVE-2023-38205
ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
Adobe · ColdFusion
ExploitedHigh7.5 - CVE-2023-29298
Adobe ColdFusion Improper Access Control Security feature bypass
Adobe · ColdFusion
ExploitedHigh7.5 - CVE-2023-26360
Adobe ColdFusion Improper Access Control Arbitrary code execution
Adobe · ColdFusion
ExploitedHigh8.6 - CVE-2018-15961
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability.…
Adobe · ColdFusion
ExploitedCritical9.8