Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*

part: a version: 2023 update: update9

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48338 vulnerable 2026-07-29 00:55:01.317849 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
MEDIUM (6.8)
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T21:04:11.745Z
Updated: 2026-07-16T15:01:16.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34619 vulnerable 2026-06-08 07:59:12.806664 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
HIGH (7.7)
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction.
Published: 2026-04-14T21:53:59.589Z
Updated: 2026-04-15T17:42:57.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27308 vulnerable 2026-06-08 07:53:22.194421 ColdFusion | Uncontrolled Resource Consumption (CWE-400)
LOW (2.4)
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation of this issue does not require user interaction.
Published: 2026-04-14T21:53:58.735Z
Updated: 2026-04-15T17:31:46.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27307 vulnerable 2026-06-08 07:53:22.192767 ColdFusion | Uncontrolled Resource Consumption (CWE-400)
LOW (2.4)
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation of this issue does not require user interaction.
Published: 2026-04-14T21:53:53.899Z
Updated: 2026-04-15T17:33:11.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27306 vulnerable 2026-06-08 07:53:22.190988 ColdFusion | Improper Input Validation (CWE-20)
HIGH (8.4)
ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Attacker requires elevated privileges. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Published: 2026-04-14T21:53:54.863Z
Updated: 2026-04-15T09:13:11.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27305 vulnerable 2026-06-08 07:53:22.185383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27304 vulnerable 2026-06-08 07:53:22.183685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27282 vulnerable 2026-06-08 07:53:22.156136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64898 vulnerable 2026-06-08 07:39:20.405573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64897 vulnerable 2026-06-08 07:39:20.389178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61823 vulnerable 2026-06-08 07:37:28.224035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61822 vulnerable 2026-06-08 07:37:28.215271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61821 vulnerable 2026-06-08 07:37:28.212002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61813 vulnerable 2026-06-08 07:37:28.163612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61812 vulnerable 2026-06-08 07:37:28.160301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61811 vulnerable 2026-06-08 07:37:28.157912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61810 vulnerable 2026-06-08 07:37:28.153992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61809 vulnerable 2026-06-08 07:37:28.145831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61808 vulnerable 2026-06-08 07:37:28.137628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54261 vulnerable 2026-06-08 07:33:12.067634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54234 vulnerable 2026-06-08 07:33:11.846024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49551 vulnerable 2026-06-08 07:29:13.576392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49546 vulnerable 2026-06-08 07:29:13.350193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49545 vulnerable 2026-06-08 07:29:13.346523 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49544 vulnerable 2026-06-08 07:29:13.342539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49543 vulnerable 2026-06-08 07:29:13.331508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49542 vulnerable 2026-06-08 07:29:13.328479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49541 vulnerable 2026-06-08 07:29:13.324959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49540 vulnerable 2026-06-08 07:29:13.317050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49539 vulnerable 2026-06-08 07:29:13.313609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49538 vulnerable 2026-06-08 07:29:13.310384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49537 vulnerable 2026-06-08 07:29:13.307283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49536 vulnerable 2026-06-08 07:29:13.299892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49535 vulnerable 2026-06-08 07:29:13.288030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43566 vulnerable 2026-06-08 07:25:09.094554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43565 vulnerable 2026-06-08 07:25:09.092400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43564 vulnerable 2026-06-08 07:25:09.090001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43563 vulnerable 2026-06-08 07:25:09.083173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43562 vulnerable 2026-06-08 07:25:09.081117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43561 vulnerable 2026-06-08 07:25:09.079299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43560 vulnerable 2026-06-08 07:25:09.076744 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43559 vulnerable 2026-06-08 07:25:09.073346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30294 vulnerable 2026-06-08 07:16:59.569148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30293 vulnerable 2026-06-08 07:16:59.562911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30292 vulnerable 2026-06-08 07:16:59.559604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30291 vulnerable 2026-06-08 07:16:59.556796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30290 vulnerable 2026-06-08 07:16:59.554248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30289 vulnerable 2026-06-08 07:16:59.551396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30288 vulnerable 2026-06-08 07:16:59.542386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30287 vulnerable 2026-06-08 07:16:59.540195 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30286 vulnerable 2026-06-08 07:16:59.537216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30285 vulnerable 2026-06-08 07:16:59.534757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30284 vulnerable 2026-06-08 07:16:59.531775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30282 vulnerable 2026-06-08 07:16:59.528686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30281 vulnerable 2026-06-08 07:16:59.517766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24447 vulnerable 2026-06-08 07:12:49.218537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24446 vulnerable 2026-06-08 07:12:49.214972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53961 vulnerable 2026-06-08 06:54:15.782055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41874 vulnerable 2026-06-08 06:43:55.384402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.