Coldfusion Security Vulnerabilities and Issues — Coldfusion CVE List

Lucene search

MacromediaColdfusion

2 matches found

CVE•added 2004/06/01 4:0 a.m.•42 views

CVE-2004-0407

The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.

2.6CVSS6.8AI score0.03852EPSS

CVE•added 2005/12/19 3:47 a.m.•33 views

CVE-2005-4344

Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local users to create an object despite the specified configuration.

2.1CVSS6.6AI score0.00022EPSS