GCVE - cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

Vendor	Macromedia (`f00ebe2b-9d72-52ca-9cf0-be998a2cdfa0`)
Product	Coldfusion (`26100411-1341-5719-a01b-6960c4e93ee8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-4343`	vulnerable	2026-06-08 04:48:43.641456	Details available Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability". Published: 2005-12-17T23:00:00.000Z Updated: 2024-08-07T23:38:51.857Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18078 http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html http://www.securityfocus.com/bid/15904 http://securitytracker.com/id?1015369	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4342`	vulnerable	2026-06-08 04:48:43.638701	Details available ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability." Published: 2005-12-17T23:00:00.000Z Updated: 2024-08-07T23:38:51.745Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18078 http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html http://www.securityfocus.com/bid/15904 http://securitytracker.com/id?1015369	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2505`	vulnerable	2026-06-08 04:48:09.951750	Details available Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data. Published: 2005-10-25T04:00:00.000Z Updated: 2024-08-08T01:29:13.617Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html https://exchange.xforce.ibmcloud.com/vulnerabilities/15895 http://www.securityfocus.com/bid/10163	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2204`	vulnerable	2026-06-08 04:48:08.842350	Details available Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT. Published: 2005-07-10T04:00:00.000Z Updated: 2024-08-08T01:22:12.407Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/377213 https://exchange.xforce.ibmcloud.com/vulnerabilities/17567 http://secunia.com/advisories/12693 http://www.osvdb.org/10718 http://www.securityfocus.com/bid/11364	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1816`	not_vulnerable	2026-06-08 04:48:07.728596	Details available Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption). Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T01:07:48.289Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=107936690702515&w=2 http://secunia.com/advisories/11130 https://exchange.xforce.ibmcloud.com/vulnerabilities/15473 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1815`	vulnerable	2026-06-08 04:48:07.719432	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1478`	vulnerable	2026-06-08 04:47:54.306451	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0928`	vulnerable	2026-06-08 04:47:51.970336	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0646`	vulnerable	2026-06-08 04:47:50.651519	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1469`	vulnerable	2026-06-08 04:47:47.663305	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1700`	vulnerable	2026-06-08 04:47:17.869419	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1309`	vulnerable	2026-06-08 04:46:23.369968	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.