Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*

part: a version: 2016 update: update3

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21087 vulnerable 2026-06-08 05:29:11.295943 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser
MEDIUM (5.4)
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Published: 2021-04-15T13:54:29.883Z
Updated: 2025-04-23T19:41:40.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9673 vulnerable 2026-06-08 05:28:02.572196 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:01:14.000Z
Updated: 2025-05-05T17:04:40.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9672 vulnerable 2026-06-08 05:28:02.558564 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:00:52.000Z
Updated: 2025-05-05T17:04:51.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3796 vulnerable 2026-06-08 05:25:57.720170 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Published: 2020-06-26T20:21:01.000Z
Updated: 2024-08-04T07:44:51.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3794 vulnerable 2026-06-08 05:25:57.718833 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Published: 2020-03-25T19:11:10.000Z
Updated: 2024-08-04T07:44:51.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3768 vulnerable 2026-06-08 05:25:57.701197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3767 vulnerable 2026-06-08 05:25:57.697936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3761 vulnerable 2026-06-08 05:25:57.679572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8074 vulnerable 2026-06-08 05:14:15.040404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8073 vulnerable 2026-06-08 05:14:15.039340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8072 vulnerable 2026-06-08 05:14:15.036950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7840 vulnerable 2026-06-08 05:14:14.823627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7839 vulnerable 2026-06-08 05:14:14.821440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7838 vulnerable 2026-06-08 05:14:14.818224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7816 vulnerable 2026-06-08 05:14:14.782804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7092 vulnerable 2026-06-08 05:14:13.812141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7091 vulnerable 2026-06-08 05:14:13.806583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4942 vulnerable 2026-06-08 05:11:49.993190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4941 vulnerable 2026-06-08 05:11:49.991896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4940 vulnerable 2026-06-08 05:11:49.990623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4939 vulnerable 2026-06-08 05:11:49.989577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4938 vulnerable 2026-06-08 05:11:49.987419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15965 vulnerable 2026-06-08 05:11:03.906749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15964 vulnerable 2026-06-08 05:11:03.904859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15963 vulnerable 2026-06-08 05:11:03.903001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15962 vulnerable 2026-06-08 05:11:03.901716 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15961 vulnerable 2026-06-08 05:11:03.900045 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15960 vulnerable 2026-06-08 05:11:03.898442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15959 vulnerable 2026-06-08 05:11:03.896017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15958 vulnerable 2026-06-08 05:11:03.894530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15957 vulnerable 2026-06-08 05:11:03.890836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3066 vulnerable 2026-06-08 05:09:26.374892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3008 vulnerable 2026-06-08 05:09:26.297792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11286 vulnerable 2026-06-08 05:08:37.117291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11285 vulnerable 2026-06-08 05:08:37.116626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11284 vulnerable 2026-06-08 05:08:37.115756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11283 vulnerable 2026-06-08 05:08:37.114497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.