CVE-2025-43559

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43560

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43565

CVE-2025-43565 affects Adobe ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier, due to an Incorrect Authorization vulnerability. The issue could allow arbitrary code execution in the context of the current user and, per the NVD entry, a high-privileged attacker could bypass protections and...

CVE-2025-43559 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43559

CVE-2025-43559 affects Adobe ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier and is due to Improper Input Validation, enabling arbitrary code execution in the context of the current user. Documents indicate a high-privileged attacker could bypass security mechanisms and execute code with...

CVE-2025-43562

CVE-2025-43562 describes an OS Command Injection in Adobe ColdFusion affecting versions 2025.1, 2023.13, 2021.19 and earlier. The root cause is improper neutralization/validation of elements in commands, enabling arbitrary code execution in the context of the current user. Exploitation is possibl...

CVE-2025-43562 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could...

CVE-2025-43566 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. A high-privileged attacker could leverage this vulnerability to bypass security...

CVE-2025-43560

Adobe ColdFusion is affected by CVE-2025-43560 (Improper Input Validation) across versions 2025.1, 2023.13, 2021.19 and earlier. The issue allows arbitrary code execution in the context of the current user without user interaction, with a high-privilege attacker capable of bypassing security mech...

CVE-2025-43560 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43560 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security mechanisms and...

CVE-2025-43561

Adobe ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could let a high-privileged attacker bypass authentication and execute arbitrary code in the context of the current user, with exploitation not requiring user interaction a...

CVE-2025-43561 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass authentication mechanisms and...

CVE-2025-42997

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

CVE-2025-42997

CVE-2025-42997 affects SAP Gateway Client. Description: information disclosure vulnerability where a high-privileged user can access restricted data beyond the application’s scope, caused by improper privilege management and data exposure that may yield low impact to confidentiality, integrity, a...

CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

PT-2025-20811 · Sap · Sap Gateway Client

Name of the Vulnerable Software and Affected Versions: SAP Gateway Client affected versions not specified Description: The issue allows a high-privileged user to access restricted information beyond the application's scope, potentially leading to low impact on confidentiality, integrity, and...

K000151274: MySQL vulnerabilities CVE-2025-21583 and CVE-2025-21584

Security Advisory Description CVE-2025-21583 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.4.0 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

K000151159: MySQL vulnerability CVE-2025-21581

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

CVE-2025-23376

Dell PowerProtect Data Manager Reporting, versions 19.16, 19.17, 19.18, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure...