Adobe ColdFusion 2016 Update 12
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*
part: a version: 2016 update: update12
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-21087 |
vulnerable | 2026-06-08 05:29:11.292627 |
ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser
MEDIUM (5.4)
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Published: 2021-04-15T13:54:29.883Z
Updated: 2025-04-23T19:41:40.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9673 |
vulnerable | 2026-06-08 05:28:02.571932 |
Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:01:14.000Z
Updated: 2025-05-05T17:04:40.888Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-9672 |
vulnerable | 2026-06-08 05:28:02.554703 |
Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:00:52.000Z
Updated: 2025-05-05T17:04:51.353Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3796 |
vulnerable | 2026-06-08 05:25:57.720101 |
Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Published: 2020-06-26T20:21:01.000Z
Updated: 2024-08-04T07:44:51.218Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3794 |
vulnerable | 2026-06-08 05:25:57.718779 |
Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Published: 2020-03-25T19:11:10.000Z
Updated: 2024-08-04T07:44:51.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3768 |
vulnerable | 2026-06-08 05:25:57.700998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3767 |
vulnerable | 2026-06-08 05:25:57.696447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-3761 |
vulnerable | 2026-06-08 05:25:57.677585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.