Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 0.5%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.EPSS 0.5%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.6%Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- Critical10.0Adobe ColdFusion Path Traversal VulnerabilityKEVEPSS 42.4%Jun 30, 2026
- High7.7ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that co…Apr 14, 2026
- Low2.4ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Apr 14, 2026
- Low2.4ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Apr 14, 2026
- High8.4ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context…Apr 14, 2026
- High8.6ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that co…Apr 14, 2026
- Critical9.3ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context…Apr 14, 2026
- High7.5ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Apr 14, 2026
- High7.4Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 98.5%Mar 18, 2024
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 97.1%Jul 20, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 99.8%Jul 20, 2023
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Jul 12, 2023
- High7.5Adobe ColdFusion Improper Access Control VulnerabilityKEVEPSS 99.8%Jul 12, 2023
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 17.0%Mar 23, 2023
- High8.6Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 97.3%Mar 15, 2023
- Critical9.8Adobe ColdFusion Unrestricted File Upload VulnerabilityKEVEPSS 100.0%Sep 25, 2018
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 62.0%May 19, 2018
- Critical9.8Adobe ColdFusion Deserialization VulnerabilityKEVEPSS 90.6%Apr 27, 2017
- Critical9.8Adobe ColdFusion Authentication Bypass VulnerabilityKEVEPSS 93.6%Jan 16, 2013