Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.7%Oct 13, 2026
- High7.7ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.7%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 1.0%Oct 13, 2026
- High7.5ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory.EPSS 0.5%Oct 13, 2026
- Critical10.0ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.7%Oct 13, 2026
- Critical9.1ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 0.7%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026
- Critical9.0ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.6%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.6ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read.EPSS 0.5%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High7.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.8%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.4%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.EPSS 0.5%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.6%Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- Medium5.5CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.Sep 22, 2026
- Medium4.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Sep 22, 2026
- Medium6.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Sep 22, 2026