adobe / coldfusion
68 known vulnerabilities in adobe coldfusion.
| CVE | Priority | EPSS | CVSS | KEV | What |
|---|---|---|---|---|---|
| CVE-2010-2861 | Act now | 99.7% | 9.8 | ● | Multiple directory traversal vulnerabilities in the administrator console in Ado… |
| CVE-2009-3960 | Act now | 90.0% | 6.5 | ● | Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1… |
| CVE-2026-48282 | Act now | 42.4% | 10.0 | ● | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi… |
| CVE-2026-48319 | Medium | 32.3% | 9.1 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D… | |
| CVE-2026-27305 | Medium | 26.3% | 8.6 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limi… | |
| CVE-2026-48376 | Medium | 15.5% | 5.4 | is affected by an Improper Encoding or Escaping of Output vulnerability that cou… | |
| CVE-2026-34619 | Medium | 7.6% | 7.7 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limi… | |
| CVE-2026-71386 | Medium | 6.9% | 8.8 | is affected by a Cross-site Scripting (XSS) vulnerability that could result in a… | |
| CVE-2026-48284 | Medium | 4.9% | 9.6 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-48362 | Medium | 4.3% | 10.0 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48320 | Medium | 4.3% | 8.5 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. … | |
| CVE-2026-27304 | Medium | 3.6% | 9.3 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48313 | Medium | 3.0% | 9.3 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limi… | |
| CVE-2026-47932 | Medium | 2.5% | 8.8 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limi… | |
| CVE-2026-47928 | Medium | 2.3% | 9.6 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu… | |
| CVE-2026-47929 | Medium | 2.1% | 8.4 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Aut… | |
| CVE-2026-48273 | Medium | 1.9% | 9.9 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall… | |
| CVE-2026-48324 | Medium | 1.4% | 9.1 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48281 | Medium | 1.4% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48277 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48276 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted … | |
| CVE-2026-48283 | Medium | 1.3% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted … | |
| CVE-2026-48322 | Medium | 1.2% | 9.9 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injec… | |
| CVE-2026-48385 | Medium | 1.2% | 7.7 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48316 | Medium | 1.1% | 10.0 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-75746 | Medium | 1.1% | 9.1 | ColdFusion is affected by an Improper Neutralization of Special Elements used in… | |
| CVE-2026-48318 | Medium | 1.1% | 9.9 | ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D… | |
| CVE-2026-48315 | Medium | 1.0% | 9.3 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Inpu… | |
| CVE-2026-76190 | Medium | 1.0% | 8.6 | ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall… | |
| CVE-2026-48285 | Medium | 0.8% | 8.6 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Re… | |
| CVE-2026-48328 | Medium | 0.8% | 7.7 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-48386 | Medium | 0.8% | 7.5 | ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vul… | |
| CVE-2026-48332 | Medium | 0.8% | 7.7 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability tha… | |
| CVE-2026-27282 | Medium | 0.7% | 7.5 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2026-48440 | Medium | 0.7% | 8.1 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could … | |
| CVE-2026-75998 | Medium | 0.6% | 7.5 | ColdFusion is affected by an Improper Access Control vulnerability that could le… | |
| CVE-2026-47930 | Medium | 0.6% | 8.1 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Inpu… | |
| CVE-2026-21273 | Medium | 0.6% | 8.7 | is affected by an Improper Input Validation vulnerability that could result in p… | |
| CVE-2026-48325 | Medium | 0.6% | 9.3 | ColdFusion is affected by a Missing Authentication for Critical Function vulnera… | |
| CVE-2026-48307 | Medium | 0.6% | 8.8 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by a reflected Cros… | |
| CVE-2025-61813 | Medium | 0.5% | 7.4 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Impr… | |
| CVE-2026-21279 | Medium | 0.5% | 8.2 | is affected by an Improper Input Validation vulnerability that could result in a… | |
| CVE-2026-48321 | Medium | 0.5% | 9.3 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-47960 | Medium | 0.5% | 7.4 | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Rest… | |
| CVE-2026-48327 | Medium | 0.4% | 9.0 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… | |
| CVE-2026-71384 | Medium | 0.4% | 9.6 | is affected by an Incorrect Authorization vulnerability that could result in a S… | |
| CVE-2026-75993 | Medium | 0.4% | 8.5 | ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. … | |
| CVE-2026-75999 | Medium | 0.4% | 8.4 | ColdFusion is affected by an Improper Input Validation vulnerability that could … | |
| CVE-2026-27306 | Medium | 0.3% | 8.4 | ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Inpu… | |
| CVE-2026-71387 | Medium | 0.3% | 8.8 | ColdFusion is affected by an Incorrect Authorization vulnerability that could re… |
Page 1 of 2
Next →