Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*

part: a version: 2021 update: -

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64898 vulnerable 2026-06-08 07:39:20.394585 ColdFusion | Insufficiently Protected Credentials (CWE-522)
MEDIUM (5.3)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could result in limited unauthorized write access. An attacker could leverage this vulnerability to gain unauthorized access by exploiting improperly stored or transmitted credentials. Exploitation of this issue does not require user interaction.
Published: 2025-12-09T23:41:10.587Z
Updated: 2026-06-23T20:46:39.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64897 vulnerable 2026-06-08 07:39:20.353146 ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.6)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability. A low privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access potentially resulting in denial of service. Exploitation of this issue requires user interaction.
Published: 2025-12-09T23:41:07.028Z
Updated: 2026-02-26T16:21:07.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61823 vulnerable 2026-06-08 07:37:28.221529 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
MEDIUM (6.2)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. A high privileged attacker could exploit this vulnerability to access sensitive files and data on the server. Exploitation of this issue requires user interaction and scope is changed.
Published: 2025-12-09T23:41:06.229Z
Updated: 2025-12-10T16:50:03.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61822 vulnerable 2026-06-08 07:37:28.212851 ColdFusion | Improper Input Validation (CWE-20)
MEDIUM (6.2)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this issue does not require user interaction and scope is changed.
Published: 2025-12-09T23:41:07.797Z
Updated: 2025-12-10T16:49:56.914Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61821 vulnerable 2026-06-08 07:37:28.209742 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
MEDIUM (6.8)
ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction and scope is changed.
Published: 2025-12-09T23:41:11.355Z
Updated: 2026-06-23T21:30:30.648Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61813 vulnerable 2026-06-08 07:37:28.161202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61812 vulnerable 2026-06-08 07:37:28.158725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61811 vulnerable 2026-06-08 07:37:28.155254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61810 vulnerable 2026-06-08 07:37:28.146495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61809 vulnerable 2026-06-08 07:37:28.143110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61808 vulnerable 2026-06-08 07:37:28.097603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54261 vulnerable 2026-06-08 07:33:12.050500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54234 vulnerable 2026-06-08 07:33:11.815312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49551 vulnerable 2026-06-08 07:29:13.566469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49546 vulnerable 2026-06-08 07:29:13.347323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49545 vulnerable 2026-06-08 07:29:13.343321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49544 vulnerable 2026-06-08 07:29:13.332185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49543 vulnerable 2026-06-08 07:29:13.329252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49542 vulnerable 2026-06-08 07:29:13.325831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49541 vulnerable 2026-06-08 07:29:13.322334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49540 vulnerable 2026-06-08 07:29:13.314296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49539 vulnerable 2026-06-08 07:29:13.311285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49538 vulnerable 2026-06-08 07:29:13.307803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49537 vulnerable 2026-06-08 07:29:13.300507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49536 vulnerable 2026-06-08 07:29:13.297925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49535 vulnerable 2026-06-08 07:29:13.255694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43566 vulnerable 2026-06-08 07:25:09.093035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43565 vulnerable 2026-06-08 07:25:09.090620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43564 vulnerable 2026-06-08 07:25:09.083830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43563 vulnerable 2026-06-08 07:25:09.081769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43562 vulnerable 2026-06-08 07:25:09.079835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43561 vulnerable 2026-06-08 07:25:09.077304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43560 vulnerable 2026-06-08 07:25:09.075140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-43559 vulnerable 2026-06-08 07:25:09.041228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30294 vulnerable 2026-06-08 07:16:59.563535 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30293 vulnerable 2026-06-08 07:16:59.560301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30292 vulnerable 2026-06-08 07:16:59.557369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30291 vulnerable 2026-06-08 07:16:59.554718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30290 vulnerable 2026-06-08 07:16:59.552132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30289 vulnerable 2026-06-08 07:16:59.542936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30288 vulnerable 2026-06-08 07:16:59.540745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30287 vulnerable 2026-06-08 07:16:59.537933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30286 vulnerable 2026-06-08 07:16:59.535443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30285 vulnerable 2026-06-08 07:16:59.532571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30284 vulnerable 2026-06-08 07:16:59.529507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30282 vulnerable 2026-06-08 07:16:59.519562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30281 vulnerable 2026-06-08 07:16:59.492266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24447 vulnerable 2026-06-08 07:12:49.216686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24446 vulnerable 2026-06-08 07:12:49.185543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53961 vulnerable 2026-06-08 06:54:15.755730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45113 vulnerable 2026-06-08 06:45:54.790602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41874 vulnerable 2026-06-08 06:43:55.385718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34112 vulnerable 2026-06-08 06:37:32.894989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20767 vulnerable 2026-06-08 06:27:30.574925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44355 vulnerable 2026-06-08 06:12:40.715822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44353 vulnerable 2026-06-08 06:12:40.713998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44352 vulnerable 2026-06-08 06:12:40.712556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44351 vulnerable 2026-06-08 06:12:40.711169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44350 vulnerable 2026-06-08 06:12:40.693158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38206 vulnerable 2026-06-08 06:08:17.249816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38205 vulnerable 2026-06-08 06:08:17.247648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38204 vulnerable 2026-06-08 06:08:17.242278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38203 vulnerable 2026-06-08 06:08:17.232011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29301 vulnerable 2026-06-08 06:02:39.443024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29300 vulnerable 2026-06-08 06:02:39.440546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29298 vulnerable 2026-06-08 06:02:39.423398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26361 vulnerable 2026-06-08 05:57:39.468020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26360 vulnerable 2026-06-08 05:57:39.466860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26359 vulnerable 2026-06-08 05:57:39.465718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26347 vulnerable 2026-06-08 05:57:39.432659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42341 vulnerable 2026-06-08 05:49:29.790661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42340 vulnerable 2026-06-08 05:49:29.785323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38424 vulnerable 2026-06-08 05:47:16.365251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38423 vulnerable 2026-06-08 05:47:16.363886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38422 vulnerable 2026-06-08 05:47:16.362637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38421 vulnerable 2026-06-08 05:47:16.361277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38420 vulnerable 2026-06-08 05:47:16.359651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38419 vulnerable 2026-06-08 05:47:16.357838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38418 vulnerable 2026-06-08 05:47:16.348226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35712 vulnerable 2026-06-08 05:46:05.167318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35711 vulnerable 2026-06-08 05:46:05.166245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35710 vulnerable 2026-06-08 05:46:05.164806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35690 vulnerable 2026-06-08 05:46:05.137431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28818 vulnerable 2026-06-08 05:42:45.899737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40699 vulnerable 2026-06-08 05:35:18.944455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40698 vulnerable 2026-06-08 05:35:18.943347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10145 vulnerable 2026-06-08 05:16:34.536485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.