GCVE - cpe:2.3:a:adobe:coldfusion_2025:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion_2025:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Coldfusion 2025 (`3b21e1fb-6908-5382-889b-475bb3242e7e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-48338`	vulnerable	2026-07-29 00:55:01.276977	ColdFusion \| Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) MEDIUM (6.8) ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. Published: 2026-07-14T21:04:11.745Z Updated: 2026-07-16T15:01:16.864Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48332`	vulnerable	2026-07-29 00:55:01.275287	ColdFusion \| Server-Side Request Forgery (SSRF) (CWE-918) HIGH (7.7) ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed. Published: 2026-07-14T21:04:13.906Z Updated: 2026-07-15T17:38:35.635Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48329`	vulnerable	2026-07-29 00:55:01.274951	ColdFusion \| Insufficient Session Expiration (CWE-613) LOW (2.7) ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Published: 2026-07-14T21:04:10.998Z Updated: 2026-07-15T14:36:31.234Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48328`	vulnerable	2026-07-29 00:55:01.274729	ColdFusion \| Improper Input Validation (CWE-20) HIGH (7.7) ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed. Published: 2026-07-14T21:04:07.429Z Updated: 2026-07-15T15:12:02.100Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48327`	vulnerable	2026-07-29 00:55:01.274336	ColdFusion \| Incorrect Authorization (CWE-863) CRITICAL (9) ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed. Published: 2026-07-14T21:04:12.455Z Updated: 2026-07-15T10:33:15.972Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48325`	vulnerable	2026-07-29 00:55:01.274003	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48324`	vulnerable	2026-07-29 00:55:01.273640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48322`	vulnerable	2026-07-29 00:55:01.273415	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48321`	vulnerable	2026-07-29 00:55:01.273202	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48320`	vulnerable	2026-07-29 00:55:01.272868	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48319`	vulnerable	2026-07-29 00:55:01.272625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48318`	vulnerable	2026-07-29 00:55:01.272143	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-48284`	vulnerable	2026-07-29 00:55:01.243012	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.