Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion_2023:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion 2023 (3439e370-7183-5a7f-90af-017092e403ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34633 vulnerable 2026-11-03 10:17:23.559606 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (7.7)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:44.259Z
Updated: 2026-10-15T03:56:40.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34634 vulnerable 2026-11-03 10:17:21.977335 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (8.6)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:32.290Z
Updated: 2026-10-14T10:40:53.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105903 vulnerable 2026-11-03 10:16:33.301277 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CRITICAL (9.9)
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:34.492Z
Updated: 2026-10-14T10:40:53.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105897 vulnerable 2026-11-03 10:16:33.281323 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (8.6)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:45.730Z
Updated: 2026-10-14T10:40:52.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105899 vulnerable 2026-11-03 10:16:33.101393 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
CRITICAL (10)
ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:23.594Z
Updated: 2026-10-14T10:40:54.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105898 vulnerable 2026-11-03 10:16:33.065276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105901 vulnerable 2026-11-03 10:16:32.938328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106613 vulnerable 2026-11-03 10:16:14.366606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106622 vulnerable 2026-11-03 10:16:14.365031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106617 vulnerable 2026-11-03 10:16:14.223144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106089 vulnerable 2026-11-03 10:16:14.133367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106090 vulnerable 2026-11-03 10:16:14.120306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106612 vulnerable 2026-11-03 10:16:14.114139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106623 vulnerable 2026-11-03 10:16:14.078089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106618 vulnerable 2026-11-03 10:16:14.028267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106621 vulnerable 2026-11-03 10:16:14.009326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106614 vulnerable 2026-11-03 10:16:13.708273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106620 vulnerable 2026-11-03 10:16:13.663608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106624 vulnerable 2026-11-03 10:16:13.635822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106615 vulnerable 2026-11-03 10:16:13.634217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106619 vulnerable 2026-11-03 10:16:13.565788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71385 vulnerable 2026-11-03 10:16:05.179735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75748 vulnerable 2026-11-03 10:15:52.020721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75994 vulnerable 2026-11-03 10:15:51.809585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75995 vulnerable 2026-11-03 10:15:51.705604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76001 vulnerable 2026-11-03 10:15:36.057076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21269 vulnerable 2026-09-16 04:34:12.967965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34635 vulnerable 2026-09-16 04:33:46.185344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25652 vulnerable 2026-09-16 04:33:14.081944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48440 vulnerable 2026-09-16 04:33:04.847279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48362 vulnerable 2026-09-16 04:33:04.823435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48385 vulnerable 2026-09-16 04:33:04.570544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48273 vulnerable 2026-09-16 04:33:04.137404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71386 vulnerable 2026-09-16 04:32:59.410904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71387 vulnerable 2026-09-16 04:32:59.071126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75993 vulnerable 2026-09-16 04:32:53.567344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75998 vulnerable 2026-09-16 04:32:53.429856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75746 vulnerable 2026-09-16 04:32:53.401845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75999 vulnerable 2026-09-16 04:32:53.342342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76002 vulnerable 2026-09-16 04:32:47.843564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76190 vulnerable 2026-09-16 04:32:47.809831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76000 vulnerable 2026-09-16 04:32:47.769553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48338 vulnerable 2026-07-29 00:55:01.277009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48332 vulnerable 2026-07-29 00:55:01.275417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48329 vulnerable 2026-07-29 00:55:01.274983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48328 vulnerable 2026-07-29 00:55:01.274764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48327 vulnerable 2026-07-29 00:55:01.274461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48325 vulnerable 2026-07-29 00:55:01.274036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48324 vulnerable 2026-07-29 00:55:01.273807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48322 vulnerable 2026-07-29 00:55:01.273450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48321 vulnerable 2026-07-29 00:55:01.273233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48320 vulnerable 2026-07-29 00:55:01.273021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48319 vulnerable 2026-07-29 00:55:01.272660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48318 vulnerable 2026-07-29 00:55:01.272304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48284 vulnerable 2026-07-29 00:55:01.244386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.