Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*

part: a version: 2016 update: -

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21087 vulnerable 2026-06-08 05:29:11.290216 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser
MEDIUM (5.4)
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Published: 2021-04-15T13:54:29.883Z
Updated: 2025-04-23T19:41:40.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9673 vulnerable 2026-06-08 05:28:02.571778 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:01:14.000Z
Updated: 2025-05-05T17:04:40.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9672 vulnerable 2026-06-08 05:28:02.551727 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:00:52.000Z
Updated: 2025-05-05T17:04:51.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3796 vulnerable 2026-06-08 05:25:57.720025 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Published: 2020-06-26T20:21:01.000Z
Updated: 2024-08-04T07:44:51.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3794 vulnerable 2026-06-08 05:25:57.718696 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Published: 2020-03-25T19:11:10.000Z
Updated: 2024-08-04T07:44:51.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3768 vulnerable 2026-06-08 05:25:57.700813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3767 vulnerable 2026-06-08 05:25:57.696371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3761 vulnerable 2026-06-08 05:25:57.674916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10145 vulnerable 2026-06-08 05:16:34.534863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8074 vulnerable 2026-06-08 05:14:15.040116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8073 vulnerable 2026-06-08 05:14:15.039245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8072 vulnerable 2026-06-08 05:14:15.035697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7840 vulnerable 2026-06-08 05:14:14.823562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7839 vulnerable 2026-06-08 05:14:14.821270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7838 vulnerable 2026-06-08 05:14:14.816393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7816 vulnerable 2026-06-08 05:14:14.782753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7092 vulnerable 2026-06-08 05:14:13.812082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7091 vulnerable 2026-06-08 05:14:13.804049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4942 vulnerable 2026-06-08 05:11:49.993036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4941 vulnerable 2026-06-08 05:11:49.991752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4940 vulnerable 2026-06-08 05:11:49.990489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4939 vulnerable 2026-06-08 05:11:49.989520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4938 vulnerable 2026-06-08 05:11:49.979884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15965 vulnerable 2026-06-08 05:11:03.906526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15964 vulnerable 2026-06-08 05:11:03.904655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15963 vulnerable 2026-06-08 05:11:03.902953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15962 vulnerable 2026-06-08 05:11:03.901668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15961 vulnerable 2026-06-08 05:11:03.899924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15960 vulnerable 2026-06-08 05:11:03.898221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15959 vulnerable 2026-06-08 05:11:03.895968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15958 vulnerable 2026-06-08 05:11:03.894388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15957 vulnerable 2026-06-08 05:11:03.889131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3066 vulnerable 2026-06-08 05:09:26.374844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3008 vulnerable 2026-06-08 05:09:26.296134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11286 vulnerable 2026-06-08 05:08:37.117245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11285 vulnerable 2026-06-08 05:08:37.116578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11284 vulnerable 2026-06-08 05:08:37.115707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11283 vulnerable 2026-06-08 05:08:37.113012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4159 vulnerable 2026-06-08 05:07:46.891560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1115 vulnerable 2026-06-08 05:07:26.500160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1114 vulnerable 2026-06-08 05:07:26.499207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1113 vulnerable 2026-06-08 05:07:26.498186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.