PT-2025-21126 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This could lead to arbitrary file...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

Adobe ColdFusion 访问控制错误漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an Improper Access Control vulnerability that stems from the system failing to properly restrict access to the file system. No details of the vulnerability are...

PT-2025-21123 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could exploit the vulnerabili...

Adobe ColdFusion 安全漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an improper authorization vulnerability that stems from the system failing to properly process authorization requests. An attacker could use this vulnerability ...

PT-2025-21121 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an incorrect authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacke...

APSB25-52 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical, important and moderate vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and privilege escalation...

PT-2025-21125 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an incorrect authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker...

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability that originates from an improperly...

PT-2025-21120 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an improper input validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

PT-2025-21119

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created file...

The vulnerability of the ColdFusion software platform, which arises due to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the ColdFusion software platform exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created file...

Adobe ColdFusion Information Disclosure Vulnerability (CNVD-2025-07807)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an information disclosure vulnerability that can be exploited by attackers to caus...

Adobe ColdFusion OS Command Injection Vulnerability (CNVD-2025-07805)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an OS command injection vulnerability that arises from the application failing to...

Adobe ColdFusion Improper Access Control Vulnerability (CNVD-2025-07806)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to cause a security...

Adobe ColdFusion Improper Input Validation Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an improper input validation vulnerability that can be exploited by an...

Adobe ColdFusion Deserialization Vulnerability

Adobe ColdFusion is the United States of America Odo than Adobe company's set of rapid application development platform. Adobe ColdFusion suffers from a deserialization vulnerability, which occurs when the program lacks strict checksums when processing externally-entered serialized data. The...