Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Adobe ColdFusion — helpx.adobe.com/security/products/coldfusion/apsb21-75.html Clear all filters
TI-2021-17655 CVE-2021-40699 · GHSA-pjjp-267v-j839

ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation

Priority LOW 35

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00565 Published 2023-09-07 No fix listed CWE-284
TI-2021-17654 CVE-2021-40698 · GHSA-fpxx-jv2f-8cf9

ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass

Priority MEDIUM 41

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass .

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00614 Published 2023-09-07 No fix listed CWE-242