The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ColdFusion software platform, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted serialized malicious data...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions and gain unauthorized access to read and write files.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and gain unauthorized access to read and write files...

The vulnerability of the ColdFusion software platform, related to the unlimited loading of dangerous type files, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ColdFusion software platform lies in the improper limitation of XML references to external objects, which allows attackers to disclose protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the ColdFusion software platform, related to errors in access control, allows attackers to escalate their privileges.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ColdFusion software platform, related to errors in access control, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to write arbitrary files into the system.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the system remotely...

The vulnerability of the ColdFusion software platform lies in the improper limitation of XML references to external objects, which allows attackers to disclose protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the ColdFusion software platform lies in the improper limitation of XML references to external objects, which allows attackers to disclose protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2025-61808: Unrestricted Upload of File with Dangerous Type

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed...

CVE-2025-61808 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed...

CVE-2025-61808 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed...

CVE-2025-61808

CVE-2025-61808 is an Adobe ColdFusion vulnerability: Unrestricted Upload of File with Dangerous Type that could allow arbitrary code execution by a high-privileged attacker. Affected products/versions include ColdFusion 2025.4, 2023.16, 2021.22 and earlier. Root cause per sources: insecure handli...

CVE-2025-61812 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction...

CVE-2025-61813 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation o...

CVE-2025-61813

CVE-2025-61813 concerns Adobe ColdFusion where an Improper Restriction of XML External Entity Reference (XXE) could allow reading arbitrary files from the server. Affected versions include ColdFusion 2025.4, 2023.16, 2021.22 and earlier. Exploitation: network vector, no user interaction required;...

CVE-2025-61812

Adobe ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability (CVE-2025-61812) that could allow a high-privileged attacker to gain arbitrary code execution. Exploitation reportedly does not require user interaction. The issue is listed a...

CVE-2025-61813 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files on the server. Exploitation o...

CVE-2025-61812 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction...