Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Adobe ColdFusion 2023, ColdFusion 2025 — helpx.adobe.com/security/products/coldfusion/apsb26-64.html Clear all filters
TI-2026-35377 CVE-2026-47929 · GHSA-f6w2-335h-mp8w

ColdFusion | Incorrect Authorization (CWE-863)

Priority MEDIUM 42

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01875 Published 2026-06-09 Fixed in 9, 20 CWE-863
TI-2026-35380 CVE-2026-47932 · GHSA-9pw3-ggm9-46qq

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Priority MEDIUM 44

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context…

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.02283 Published 2026-06-09 Fixed in 9, 20 CWE-22
TI-2026-35376 CVE-2026-47928 · GHSA-xq2f-wvpp-9qrx

ColdFusion | Improper Input Validation (CWE-20)

Priority MEDIUM 47

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.02079 Published 2026-06-09 Fixed in 9, 20 CWE-20
TI-2026-35379 CVE-2026-47931 · GHSA-jpc9-55w6-65ch

ColdFusion | Improper Input Validation (CWE-20)

Priority LOW 38

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00242 Published 2026-06-09 Fixed in 9, 20 CWE-20
TI-2026-35378 CVE-2026-47930 · GHSA-w3fv-q97h-6qqh

ColdFusion | Improper Input Validation (CWE-20)

Priority LOW 38

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00569 Published 2026-06-09 Fixed in 9, 20 CWE-20
TI-2026-35381 CVE-2026-47933 · GHSA-4wgh-wf35-gj87

ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 21

ColdFusion versions 2023.19, 2025.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges User interaction EPSS 0.00205 Published 2026-06-09 Fixed in 9, 20 CWE-79