Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ColdFusion — Vulnerabilities & Security Advisories 110

All 110 CVE vulnerabilities found in ColdFusion, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with Adobe ColdFusion, categorized by specific weakness types and vendor advisories. It collects known defects in the product, covering a historical time range that spans from early releases through recent patches issued by Adobe. Here, you can track the vendor's advisory releases, analyze the recurring weakness classes affecting the application server, and review the complete vulnerability history for ColdFusion. The data highlights common issues such as remote code execution, cross-site scripting, and information disclosure, providing a structured view of how the product’s security posture has evolved over time. This resource is intended for security analysts and developers who need to assess risk, prioritize patching, or audit the stability of systems running this software. By consolidating these records, the page offers a clear reference for understanding the patterns of failure in ColdFusion and the corresponding fixes released by the vendor. No individual CVE identifiers are listed, allowing focus on the broader trends rather than isolated incidents. This aggregation serves as a neutral reference for compliance and security planning.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2023-44350 ColdFusion | Deserialization of Untrusted Data (CWE-502) CWE-502 9.8 Critical 2023-11-17
CVE-2023-38204 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8 CWE-502 9.8 Critical 2023-09-14
CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 CWE-284 7.5 High 2023-09-14
CVE-2023-38206 ColdFusion | Improper Access Control (CWE-284) CWE-284 5.3 Medium 2023-09-14
CVE-2021-40699 ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation CWE-284 7.4 High 2023-09-07
CVE-2021-40698 ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass   CWE-242 7.4 High 2023-09-07
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE CWE-502 9.8 Critical 2023-07-20
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution CWE-502 9.8 Critical 2023-07-12
CVE-2023-29301 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass CWE-307 7.5 High 2023-07-12
CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass CWE-284 7.5 High 2023-07-12
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution CWE-502 9.8 Critical 2023-03-23
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution CWE-284 8.6 High 2023-03-23
CVE-2023-26361 Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability CWE-22 4.9 Medium 2023-03-23
CVE-2022-38424 Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write CWE-22 7.2 High 2022-10-14
CVE-2022-42340 Adobe ColdFusion Improper Input Validation Arbitrary file system read CWE-20 7.5 High 2022-10-14
CVE-2022-42341 Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read CWE-611 7.5 High 2022-10-14
CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read CWE-611 7.5 High 2022-10-14
CVE-2022-38421 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability CWE-22 7.2 High 2022-10-14
CVE-2022-38422 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability CWE-22 7.5 High 2022-10-14
CVE-2022-38423 Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability CWE-22 4.9 Medium 2022-10-14
CVE-2022-35690 Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 9.8 Critical 2022-10-14
CVE-2022-35711 Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 9.8 Critical 2022-10-14
CVE-2022-35712 Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 9.8 Critical 2022-10-14
CVE-2022-38420 Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service CWE-798 7.5 High 2022-10-14
CVE-2022-35710 Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability CWE-121 9.8 Critical 2022-10-14
CVE-2022-38418 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability CWE-22 9.8 Critical 2022-10-14
CVE-2022-28818 ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution CWE-79 6.1 - 2022-05-12
CVE-2020-10145 Adobe ColdFusion 安全漏洞 CWE-284 7.8 High 2021-05-27
CVE-2021-21087 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser CWE-79 6.1 - 2021-04-15
CVE-2020-3796 Adobe ColdFusion 信息泄露漏洞 7.5 - 2020-06-26

All 110 known CVE vulnerabilities affecting ColdFusion with full Chinese analysis, references, and POCs where available.