Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Adobe ColdFusion — helpx.adobe.com/security/products/coldfusion/apsb24-41.html Clear all filters
TI-2024-22569 CVE-2024-34112 · GHSA-w2vq-f5f5-hrv8

ColdFusion CFDOCUMENT file retrieval / access control bypass

Priority MEDIUM 59

ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.237 Published 2024-06-13 No fix listed CWE-284
TI-2024-22570 CVE-2024-34113 · GHSA-cvfx-wfgc-g5xw

ColdFusion | Weak Cryptography for Passwords (CWE-261)

Priority LOW 25

ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that could result in a security feature bypass.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00335 Published 2024-06-13 No fix listed CWE-261