All 96 CVE vulnerabilities found in ColdFusion 2025, with AI-generated Chinese analysis, references, and POCs.
This page aggregates Common Weakness Enumeration (CWE) vulnerabilities associated with Adobe ColdFusion 2025. It serves as a comprehensive resource for security researchers and administrators seeking to understand the specific threat landscape surrounding this enterprise application server platform. The content encompasses a wide spectrum of security flaws, including injection attacks, cross-site scripting, server-side request forgery, and improper access control issues that have been identified within the software. This collection covers vulnerability data reported from initial release through recent years, ensuring a historical perspective on the product's security evolution. By consulting this aggregated data, users can effectively track vendor advisories and patch releases issued by Adobe to address critical flaws. Furthermore, individuals can analyze trends related to specific weakness classes to better comprehend the nature of defects in this environment. The page also allows for a detailed lookup of the product’s vulnerability history, providing context on recurring issues and the effectiveness of long-term security fixes. This structured approach facilitates informed decision-making regarding system hardening and upgrade paths. Users interested in the specific technical details of how these weaknesses manifest in ColdFusion 2025 will find relevant categorizations and references here. The goal is to provide a clear, non-promotional overview of known security issues to support proactive defense strategies and compliance monitoring.
Vendor: Adobe
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-27308 | ColdFusion | Uncontrolled Resource Consumption (CWE-400) CWE-400 | 2.4 | Low | 2026-04-14 |
| CVE-2026-27282 | ColdFusion | Improper Input Validation (CWE-20) CWE-20 | 7.5 | High | 2026-04-14 |
| CVE-2026-27305 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 | 8.6 | High | 2026-04-14 |
| CVE-2026-27304 | ColdFusion | Improper Input Validation (CWE-20) CWE-20 | 9.3 | Critical | 2026-04-14 |
| CVE-2026-27306 | ColdFusion | Improper Input Validation (CWE-20) CWE-20 | 8.4 | High | 2026-04-14 |
| CVE-2026-27307 | ColdFusion | Uncontrolled Resource Consumption (CWE-400) CWE-400 | 2.4 | Low | 2026-04-14 |
All 96 known CVE vulnerabilities affecting ColdFusion 2025 with full Chinese analysis, references, and POCs where available.