Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2021:update9:*:*:*:*:*:*

part: a version: 2021 update: update9

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64898 vulnerable 2026-06-08 07:39:20.404723 ColdFusion | Insufficiently Protected Credentials (CWE-522)
MEDIUM (5.3)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or transmitted credentials. Exploitation of this issue does not require user interaction.
Published: 2025-12-09T23:41:10.587Z
Updated: 2026-06-23T20:46:39.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64897 vulnerable 2026-06-08 07:39:20.377179 ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.6)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.
Published: 2025-12-09T23:41:07.028Z
Updated: 2026-02-26T16:21:07.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61823 vulnerable 2026-06-08 07:37:28.222903 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
MEDIUM (6.2)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. A high privileged attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue requires user interaction and scope is changed.
Published: 2025-12-09T23:41:06.229Z
Updated: 2025-12-10T16:50:03.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61822 vulnerable 2026-06-08 07:37:28.213941 ColdFusion | Improper Input Validation (CWE-20)
MEDIUM (6.2)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this issue does not require user interaction and scope is changed.
Published: 2025-12-09T23:41:07.797Z
Updated: 2025-12-10T16:49:56.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61821 vulnerable 2026-06-08 07:37:28.210916 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
MEDIUM (6.8)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction and scope is changed.
Published: 2025-12-09T23:41:11.355Z
Updated: 2026-06-23T21:30:30.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61813 vulnerable 2026-06-08 07:37:28.162596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61812 vulnerable 2026-06-08 07:37:28.159628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61811 vulnerable 2026-06-08 07:37:28.156555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61810 vulnerable 2026-06-08 07:37:28.153021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61809 vulnerable 2026-06-08 07:37:28.144677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61808 vulnerable 2026-06-08 07:37:28.124760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54261 vulnerable 2026-06-08 07:33:12.062833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54234 vulnerable 2026-06-08 07:33:11.834982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49551 vulnerable 2026-06-08 07:29:13.574946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49546 vulnerable 2026-06-08 07:29:13.348675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49545 vulnerable 2026-06-08 07:29:13.345143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49544 vulnerable 2026-06-08 07:29:13.333693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49543 vulnerable 2026-06-08 07:29:13.330613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49542 vulnerable 2026-06-08 07:29:13.327539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49541 vulnerable 2026-06-08 07:29:13.323754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49540 vulnerable 2026-06-08 07:29:13.315839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49539 vulnerable 2026-06-08 07:29:13.312401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49538 vulnerable 2026-06-08 07:29:13.309326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49537 vulnerable 2026-06-08 07:29:13.301728 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49536 vulnerable 2026-06-08 07:29:13.298891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49535 vulnerable 2026-06-08 07:29:13.276484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43566 vulnerable 2026-06-08 07:25:09.093807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43565 vulnerable 2026-06-08 07:25:09.091763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43564 vulnerable 2026-06-08 07:25:09.084784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43563 vulnerable 2026-06-08 07:25:09.082435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43562 vulnerable 2026-06-08 07:25:09.080695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43561 vulnerable 2026-06-08 07:25:09.078468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43560 vulnerable 2026-06-08 07:25:09.076100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43559 vulnerable 2026-06-08 07:25:09.063752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30294 vulnerable 2026-06-08 07:16:59.568304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30293 vulnerable 2026-06-08 07:16:59.561707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30292 vulnerable 2026-06-08 07:16:59.558557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30291 vulnerable 2026-06-08 07:16:59.556043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30290 vulnerable 2026-06-08 07:16:59.553384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30289 vulnerable 2026-06-08 07:16:59.544350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30288 vulnerable 2026-06-08 07:16:59.541943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30287 vulnerable 2026-06-08 07:16:59.539274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30286 vulnerable 2026-06-08 07:16:59.536559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30285 vulnerable 2026-06-08 07:16:59.533871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30284 vulnerable 2026-06-08 07:16:59.530948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30282 vulnerable 2026-06-08 07:16:59.527942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30281 vulnerable 2026-06-08 07:16:59.508347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24447 vulnerable 2026-06-08 07:12:49.217711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24446 vulnerable 2026-06-08 07:12:49.206360 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53961 vulnerable 2026-06-08 06:54:15.774628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45113 vulnerable 2026-06-08 06:45:54.804446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41874 vulnerable 2026-06-08 06:43:55.396932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34113 vulnerable 2026-06-08 06:37:32.912424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34112 vulnerable 2026-06-08 06:37:32.906862 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20767 vulnerable 2026-06-08 06:27:30.588491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44355 vulnerable 2026-06-08 06:12:40.716485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44353 vulnerable 2026-06-08 06:12:40.714811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44352 vulnerable 2026-06-08 06:12:40.713197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44351 vulnerable 2026-06-08 06:12:40.711642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44350 vulnerable 2026-06-08 06:12:40.706132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26347 vulnerable 2026-06-08 05:57:39.442072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.