Read the docs
TI-2016-01021 Aliases CVE-2016-1115GHSA-fr3r-r4pg-fc5c

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1…

Priority LOW 31CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

Why it matters now

EPSS 0.02485 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:*10.0VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:*10.0 update1VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:*10.0 update10VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:*10.0 update11VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:*10.0 update12VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:*10.0 update13VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:*10.0 update14VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:*10.0 update15VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:*10.0 update16VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:*10.0 update17VulnerableAdobe
  • cpe:2.3:a:adobe:coldfusion:10.0:-:*:*:*:*:*:* Versions 10.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update1:*:*:*:*:*:* Versions 10.0 update1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update10:*:*:*:*:*:* Versions 10.0 update10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update11:*:*:*:*:*:* Versions 10.0 update11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update12:*:*:*:*:*:* Versions 10.0 update12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update13:*:*:*:*:*:* Versions 10.0 update13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update14:*:*:*:*:*:* Versions 10.0 update14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update15:*:*:*:*:*:* Versions 10.0 update15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update16:*:*:*:*:*:* Versions 10.0 update16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update17:*:*:*:*:*:* Versions 10.0 update17 Vulnerable ·Adobe
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:*10.0 update18VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:*10.0 update2VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:*10.0 update3VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:*10.0 update4VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:*10.0 update5VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:*10.0 update6VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:*10.0 update7VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:*10.0 update8VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:*10.0 update9VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:*11.0VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:*11.0 update1VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:*11.0 update2VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:*11.0 update3VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:*11.0 update4VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:*11.0 update5VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:*11.0 update6VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:*11.0 update7VulnerableAdobe
cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*2016VulnerableAdobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update18:*:*:*:*:*:* Versions 10.0 update18 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update2:*:*:*:*:*:* Versions 10.0 update2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update3:*:*:*:*:*:* Versions 10.0 update3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update4:*:*:*:*:*:* Versions 10.0 update4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update5:*:*:*:*:*:* Versions 10.0 update5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update6:*:*:*:*:*:* Versions 10.0 update6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update7:*:*:*:*:*:* Versions 10.0 update7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update8:*:*:*:*:*:* Versions 10.0 update8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:10.0:update9:*:*:*:*:*:* Versions 10.0 update9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:* Versions 11.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update1:*:*:*:*:*:* Versions 11.0 update1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update2:*:*:*:*:*:* Versions 11.0 update2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update3:*:*:*:*:*:* Versions 11.0 update3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update4:*:*:*:*:*:* Versions 11.0 update4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update5:*:*:*:*:*:* Versions 11.0 update5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update6:*:*:*:*:*:* Versions 11.0 update6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:11.0:update7:*:*:*:*:*:* Versions 11.0 update7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:* Versions 2016 Vulnerable ·Adobe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-1115
  2. 2026-10-03 Alias added: GHSA-fr3r-r4pg-fc5c

References

Advisory 1

  • TI-2026-35688 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) KEVCVSS 3.1CRITICAL 10.0
  • TI-2023-19615 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-13696 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-11512 Adobe ColdFusion Improper Access Control Arbitrary code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-11511 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-11393 Unrestricted file upload in Adobe ColdFusion KEVCVSS 3.1CRITICAL 9.8
See all 295 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences