Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*

part: a version: 2016 update: update6

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21087 vulnerable 2026-06-08 05:29:11.297493 ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser
MEDIUM (5.4)
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Published: 2021-04-15T13:54:29.883Z
Updated: 2025-04-23T19:41:40.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9673 vulnerable 2026-06-08 05:28:02.572408 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:01:14.000Z
Updated: 2025-05-05T17:04:40.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9672 vulnerable 2026-06-08 05:28:02.560614 Details available
Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-07-17T00:00:52.000Z
Updated: 2025-05-05T17:04:51.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3796 vulnerable 2026-06-08 05:25:57.720217 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
Published: 2020-06-26T20:21:01.000Z
Updated: 2024-08-04T07:44:51.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3794 vulnerable 2026-06-08 05:25:57.718883 Details available
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory.
Published: 2020-03-25T19:11:10.000Z
Updated: 2024-08-04T07:44:51.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3768 vulnerable 2026-06-08 05:25:57.701419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3767 vulnerable 2026-06-08 05:25:57.698095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3761 vulnerable 2026-06-08 05:25:57.681290 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8074 vulnerable 2026-06-08 05:14:15.040452 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8073 vulnerable 2026-06-08 05:14:15.039389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8072 vulnerable 2026-06-08 05:14:15.037006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7840 vulnerable 2026-06-08 05:14:14.823754 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7839 vulnerable 2026-06-08 05:14:14.821590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7838 vulnerable 2026-06-08 05:14:14.818358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7816 vulnerable 2026-06-08 05:14:14.782856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7092 vulnerable 2026-06-08 05:14:13.812476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7091 vulnerable 2026-06-08 05:14:13.809072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15965 vulnerable 2026-06-08 05:11:03.906971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15964 vulnerable 2026-06-08 05:11:03.905143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15963 vulnerable 2026-06-08 05:11:03.903135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15962 vulnerable 2026-06-08 05:11:03.901764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15961 vulnerable 2026-06-08 05:11:03.900187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15960 vulnerable 2026-06-08 05:11:03.898491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15959 vulnerable 2026-06-08 05:11:03.896064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15958 vulnerable 2026-06-08 05:11:03.894680 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15957 vulnerable 2026-06-08 05:11:03.892463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.