Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

ColdFusion — Vulnerabilities & Security Advisories 117

All 117 CVE vulnerabilities found in ColdFusion, with AI-generated Chinese analysis, references, and POCs.

Vendor: Adobe

CVE IDTitleCVSSSeverityPaused
CVE-2025-49543 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.3 Medium2025-07-08
CVE-2025-49540 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.3 Medium2025-07-08
CVE-2025-49538 ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91) CWE-91 7.4 High2025-07-08
CVE-2025-43565 ColdFusion | Incorrect Authorization (CWE-863) CWE-863 8.4 High2025-05-13
CVE-2025-43559 ColdFusion | Improper Input Validation (CWE-20) CWE-20 9.1 Critical2025-05-13
CVE-2025-43562 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CWE-78 9.1 Critical2025-05-13
CVE-2025-43566 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 6.8 Medium2025-05-13
CVE-2025-43564 ColdFusion | Incorrect Authorization (CWE-863) CWE-863 9.1 Critical2025-05-13
CVE-2025-43563 ColdFusion | Improper Access Control (CWE-284) CWE-284 9.1 Critical2025-05-13
CVE-2025-43560 ColdFusion | Improper Input Validation (CWE-20) CWE-20 9.1 Critical2025-05-13
CVE-2025-43561 ColdFusion | Incorrect Authorization (CWE-863) CWE-863 9.1 Critical2025-05-13
CVE-2025-30293 ColdFusion | Improper Input Validation (CWE-20) CWE-20 6.8 Medium2025-04-08
CVE-2025-30287 ColdFusion | Improper Authentication (CWE-287) CWE-287 8.2 High2025-04-08
CVE-2025-30292 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) CWE-79 6.1 Medium2025-04-08
CVE-2025-30290 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 8.7 High2025-04-08
CVE-2025-30282 ColdFusion | Improper Authentication (CWE-287) CWE-287 9.1 Critical2025-04-08
CVE-2025-30284 ColdFusion | Deserialization of Untrusted Data (CWE-502) CWE-502 8.4 High2025-04-08
CVE-2025-30294 ColdFusion | Improper Input Validation (CWE-20) CWE-20 6.8 Medium2025-04-08
CVE-2025-30289 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CWE-78 8.2 High2025-04-08
CVE-2025-30288 ColdFusion | Improper Access Control (CWE-284) CWE-284 8.2 High2025-04-08
CVE-2025-24446 ColdFusion | Improper Input Validation (CWE-20) CWE-20 9.1 Critical2025-04-08
CVE-2025-24447 ColdFusion | Deserialization of Untrusted Data (CWE-502) CWE-502 9.1 Critical2025-04-08
CVE-2025-30281 ColdFusion | Improper Access Control (CWE-284) CWE-284 9.1 Critical2025-04-08
CVE-2025-30291 ColdFusion | Information Exposure (CWE-200) CWE-200 5.5 Medium2025-04-08
CVE-2025-30285 ColdFusion | Deserialization of Untrusted Data (CWE-502) CWE-502 8.4 High2025-04-08
CVE-2025-30286 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CWE-78 8.4 High2025-04-08
CVE-2024-53961 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 8.1 High2024-12-23
CVE-2024-41874 ColdFusion | Deserialization of Untrusted Data (CWE-502) CWE-502 9.8 Critical2024-09-13
CVE-2024-45113 ColdFusion | Improper Authentication (CWE-287) CWE-287 7.5 High2024-09-13
CVE-2024-34112 ColdFusion CFDOCUMENT file retrieval / access control bypass CWE-284 7.5 High2024-06-13

All 117 known CVE vulnerabilities affecting ColdFusion with full Chinese analysis, references, and POCs where available.