Adobe ColdFusion 2016 Update 11

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*

part: a version: 2016 update: update11

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21087 vulnerable 2026-06-08 05:29:11.292119 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser
MEDIUM (5.4)
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Published: 2021-04-15T13:54:29.883Z
Updated: 2025-04-23T19:41:40.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9673 vulnerable 2026-06-08 05:28:02.571914 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:01:14.000Z
Updated: 2025-05-05T17:04:40.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9672 vulnerable 2026-06-08 05:28:02.554032 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:00:52.000Z
Updated: 2025-05-05T17:04:51.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3796 vulnerable 2026-06-08 05:25:57.720084 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Published: 2020-06-26T20:21:01.000Z
Updated: 2024-08-04T07:44:51.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3794 vulnerable 2026-06-08 05:25:57.718762 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Published: 2020-03-25T19:11:10.000Z
Updated: 2024-08-04T07:44:51.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3768 vulnerable 2026-06-08 05:25:57.700980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3767 vulnerable 2026-06-08 05:25:57.696432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3761 vulnerable 2026-06-08 05:25:57.677090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8074 vulnerable 2026-06-08 05:14:15.040369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8073 vulnerable 2026-06-08 05:14:15.039307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8072 vulnerable 2026-06-08 05:14:15.036793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.