GCVE - cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*

part: a version: 2016 update: update7

Vendor	Adobe (`fb293c1b-cab3-5565-9184-186e4ece530b`)
Product	Coldfusion (`db90b161-3a2c-5267-99af-6a14e5723f4c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21087`	vulnerable	2026-06-08 05:29:11.297977	ColdFusion Improper neutralization of web input during page generation could lead to arbitrary JavaScript execution in the browser MEDIUM (5.4) Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction. Published: 2021-04-15T13:54:29.883Z Updated: 2025-04-23T19:41:40.132Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9673`	vulnerable	2026-06-08 05:28:02.572424	Details available Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation. Published: 2020-07-17T00:01:14.000Z Updated: 2025-05-05T17:04:40.888Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-9672`	vulnerable	2026-06-08 05:28:02.561525	Details available Adobe ColdFusion 2016 update 15 and earlier versions, and ColdFusion 2018 update 9 and earlier versions have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation. Published: 2020-07-17T00:00:52.000Z Updated: 2025-05-05T17:04:51.353Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb20-43.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3796`	vulnerable	2026-06-08 05:25:57.720233	Details available ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure. Published: 2020-06-26T20:21:01.000Z Updated: 2024-08-04T07:44:51.218Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3794`	vulnerable	2026-06-08 05:25:57.718900	Details available ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in the webroot or its subdirectory. Published: 2020-03-25T19:11:10.000Z Updated: 2024-08-04T07:44:51.060Z Open on db.gcve.eu Reference links https://helpx.adobe.com/security/products/coldfusion/apsb20-16.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3768`	vulnerable	2026-06-08 05:25:57.701436	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3767`	vulnerable	2026-06-08 05:25:57.698117	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3761`	vulnerable	2026-06-08 05:25:57.681921	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8074`	vulnerable	2026-06-08 05:14:15.040468	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8073`	vulnerable	2026-06-08 05:14:15.039507	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-8072`	vulnerable	2026-06-08 05:14:15.037024	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7840`	vulnerable	2026-06-08 05:14:14.823771	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7839`	vulnerable	2026-06-08 05:14:14.821607	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7838`	vulnerable	2026-06-08 05:14:14.818375	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7816`	vulnerable	2026-06-08 05:14:14.783008	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7092`	vulnerable	2026-06-08 05:14:13.812579	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7091`	vulnerable	2026-06-08 05:14:13.809704	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.