Known vulnerabilities in ColdFusion 2021 Update 11 - page 4

Vendor: Adobe
Software: ColdFusion
Version: 2021 Update 11
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Website: https://www.adobe.com
Total vulnerabilities: 91
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2021 Update 11 ColdFusion 2021 Update 11 is affected by 91 vulnerabilities: 8 critical, 20 high, 26 medium, 37 low Critical High Medium Low

Vulnerabilities (91)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109127 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-43566		 CWE-22 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109124 - Improper Access Control
CVE-2025-43563		 CWE-284 Medium
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109123 - Incorrect Authorization
CVE-2025-43564		 CWE-863 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109122 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-43562		 CWE-78 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109120 - Improper Access Control
CVE-2025-43561		 CWE-284 Medium
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU107825 - Improper input validation
CVE-2025-30294		 CWE-20 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107824 - Improper input validation
CVE-2025-30293		 CWE-20 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-30292		 CWE-79 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107822 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30291		 CWE-200 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107821 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30290		 CWE-22 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30289		 CWE-78 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107819 - Improper Access Control
CVE-2025-30288		 CWE-284 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107818 - Improper Authentication
CVE-2025-30287		 CWE-287 High
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107817 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30286		 CWE-78 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107816 - Deserialization of Untrusted Data
CVE-2025-30285		 CWE-502 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107815 - Deserialization of Untrusted Data
CVE-2025-30284		 CWE-502 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107814 - Improper Authentication
CVE-2025-30282		 CWE-287 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107222 - Improper Access Control
CVE-2025-30281		 CWE-284 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301
#VU107221 - Deserialization of Untrusted Data
CVE-2025-24447		 CWE-502 Critical
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301
#VU107220 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-24446		 CWE-22 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301


Showing elements 61 - 80 out of 91