Approved changes feed: RSS · Atom

cpe:2.3:a:macromedia:coldfusion:4.5:*:*:*:*:*:*:*

part: a version: 4.5 update: *

VendorMacromedia (f00ebe2b-9d72-52ca-9cf0-be998a2cdfa0)
ProductColdfusion (26100411-1341-5719-a01b-6960c4e93ee8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2001-1514 vulnerable 2026-06-03 14:26:12.834115 Details available
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account.
Published: 2005-07-14T04:00:00.000Z
Updated: 2024-09-16T22:51:24.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1427 vulnerable 2026-06-03 14:26:12.497254 Details available
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.
Published: 2005-03-22T05:00:00.000Z
Updated: 2024-08-08T04:58:09.619Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.