Known vulnerabilities in ColdFusion 2021 Update 7 - page 3
Vendor:
Adobe
Software:
ColdFusion
Version:
2021 Update 7
Software CPE:
cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
95
Public exploits:
1
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
2023 Update 23
2025 Update 12
2023 Update 22
2025 Update 11
2025 Update 10
2023 Update 21
2023 Update 20
2025 Update 9
2025 Update 8
2025 Update 7
2023 Update 19
2023 Update 18
2025 Update 6
2025 Update 5
2023 Update 17
2021 Update 23
2021 Update 22
2023 Update 16
2025 Update 4
2021 Update 21
2023 Update 15
2025 Update 3
2021 Update 20
2023 Update 14
2025 Update 2
2025 Update 1
2023 Update 13
2021 Update 19
2025
2023 Update 12
2021 Update 18
2023 Update 11
2021 Update 17
2023 Update 10
2021 Update 16
2023 Update 9
2021 Update 15
2021 Update 14
2023 Update 8
2023 Update 7
2021 Update 13
2021 Update 12
2023 Update 6
2021 Update 11
2021 Update 10
2023 Update 5
2023 Update 4
2023 Update 3
2021 Update 9
2018 Update 19
2018 Update 18
2021 Update 8
2023 Update 2
2023 Update 1
2023
2021 Update 7
2018 Update 17
2021 Update 6
2018 Update 16
2021 Update 5
2018 Update 15
2018 Update 14
2021 Update 4
2018 Update 13
2021 Update 3
2021 Update 2
2018 Update 12
2016 Update 17
2018 Update 11
2021 Update 1
2021
8.1
7.0
6.0
5.0
4.5
8.0.1
8.0
2018 Update 10
2016 Update 16
2018 Update 9
2016 Update 15
-
2018 Update 8
2016 Update 14
2016 Update 13
7.0.2
7.0.1
6.1
2018 Update 7
2018 Update 6
2018 Update 5
2016 Update 12
2018 Update 4
2016 Update 11
11 Update 19
11 Update 18
2018 Update 3
2016 Update 10
2016 Update 9
11 Update 17
2018 Update 2
2016 Update 8
11 Update 16
2018 Update 1
2016 Update 7
11 Update 15
2018
11 Update 14
2016 Update 6
11 Update 13
2016 Update 5
11
2016 Update 4
2016 Update 3
11 Update 12
11 Update 11
11 Update 6
11 Update 5
11 Update 4
11 Update 3
11 Update 2
11 Update 1
10 Update 23
10 Update 22
10 Update 17
10 Update 16
10 Update 15
10 Update 14
10 Update 13
10 Update 12
10 Update 11
10 Update 10
10 Update 9
10 Update 8
10 Update 7
10 Update 6
10 Update 5
10 Update 4
10 Update 3
10 Update 2
10 Update 1
10 Update 18
11 Update 7
2016
10.0
9.0.2
9.0.1
9.0
11 Update 10
10 Update 21
2016 Update 2
11 Update 9
10 Update 20
2016 Update 1
11 Update 8
10 Update 19
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119534 - Insufficiently Protected Credentials CVE-2025-64898 |
CWE-522 | Medium | 2021 Update 23, 2023 Update 17, 2025 Update 5 | 10.12.2025 |
SB2025121022 |
||
| #VU119530 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-61823 |
CWE-611 | Low | 2021 Update 23, 2023 Update 17, 2025 Update 5 | 10.12.2025 |
SB2025121022 |
||
| #VU119528 - Improper input validation CVE-2025-61822 |
CWE-20 | Low | 2021 Update 23, 2023 Update 17, 2025 Update 5 | 10.12.2025 |
SB2025121022 |
||
| #VU115039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-54261 |
CWE-22 | Critical | 2021 Update 22, 2023 Update 16, 2025 Update 4 | 09.09.2025 |
SB2025090965 |
||
| #VU112614 - Improper Access Control CVE-2025-49546 |
CWE-284 | Low | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112613 - Server-Side Request Forgery (SSRF) CVE-2025-49545 |
CWE-918 | Medium | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112612 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-49544 |
CWE-611 | Medium | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112609 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-49541 |
CWE-79 | Low | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112610 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-49542 |
CWE-79 | Low | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112611 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-49543 |
CWE-79 | Low | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-49540 |
CWE-79 | Low | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112607 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-49539 |
CWE-611 | High | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112606 - XML Injection CVE-2025-49538 |
CWE-91 | High | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112605 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-49537 |
CWE-78 | Medium | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112604 - Incorrect Authorization CVE-2025-49536 |
CWE-863 | Medium | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112594 - Use of Hard-coded Credentials CVE-2025-49551 |
CWE-798 | High | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU112593 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-49535 |
CWE-611 | High | 2021 Update 21, 2023 Update 15, 2025 Update 3 | 09.07.2025 |
SB2025070955 |
||
| #VU109123 - Incorrect Authorization CVE-2025-43564 |
CWE-863 | Low | 2021 Update 20, 2023 Update 14, 2025 Update 2 | 13.05.2025 |
SB20250513117 |
||
| #VU109119 - Improper input validation CVE-2025-43560 |
CWE-20 | Low | 2021 Update 20, 2023 Update 14, 2025 Update 2 | 13.05.2025 |
SB20250513117 |
||
| #VU109117 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-43559 |
CWE-22 | High | 2021 Update 20, 2023 Update 14, 2025 Update 2 | 13.05.2025 |
SB20250513117 |
Showing elements 41 - 60 out of 95