CVE security advisories and vulnerability history for coldfusion by adobe.
Last updated
adobe coldfusion has 208 published CVE records since 2006, of which 16 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting adobe coldfusion, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of adobe coldfusion's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
90 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
16
16 of adobe coldfusion's CVEs are confirmed exploited in the wild.
Public exploits
25
25 of adobe coldfusion's CVEs have a known public exploit available.
Browse every adobe coldfusion version named in a CVE, then pick one to see only the CVEs that affect it.
208 CVEs
Showing 30 of 208
The CWE weakness categories most often found in adobe coldfusion CVEs. Follow any weakness for its full explanation.
How many adobe coldfusion CVEs were published each year.
Browse vulnerabilities for other products by adobe.
Common questions about adobe coldfusion vulnerabilities.
adobe coldfusion has 208 published CVE records since 2006.
Yes — 16 of adobe coldfusion's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 25 of adobe coldfusion's CVEs have a known public exploit.
40 distinct adobe coldfusion versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
adobe coldfusion's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-284 (Improper Access Control), CWE-20 (Improper Input Validation).
adobe coldfusion has 42 critical and 43 high-severity CVEs.
The average CVSS base score across adobe coldfusion's scored CVEs is 7.7.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new adobe coldfusion vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
