Known vulnerabilities in ColdFusion 2023 Update 6 - page 5

Vendor: Adobe
Software: ColdFusion
Version: 2023 Update 6
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Website: https://www.adobe.com
Total vulnerabilities: 108
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2023 Update 6 ColdFusion 2023 Update 6 is affected by 108 vulnerabilities: 9 critical, 24 high, 31 medium, 44 low Critical High Medium Low

Vulnerabilities (108)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109127 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-43566		 CWE-22 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109125 - Improper Access Control
CVE-2025-43565		 CWE-284 Medium
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109124 - Improper Access Control
CVE-2025-43563		 CWE-284 Medium
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109123 - Incorrect Authorization
CVE-2025-43564		 CWE-863 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109122 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-43562		 CWE-78 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109120 - Improper Access Control
CVE-2025-43561		 CWE-284 Medium
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109119 - Improper input validation
CVE-2025-43560		 CWE-20 Low
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU109117 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-43559		 CWE-22 High
No
No
 2021 Update 20, 2023 Update 14, 2025 Update 2 13.05.2025 SB20250513117
#VU107822 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30291		 CWE-200 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107821 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30290		 CWE-22 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107820 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30289		 CWE-78 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107819 - Improper Access Control
CVE-2025-30288		 CWE-284 Medium
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107818 - Improper Authentication
CVE-2025-30287		 CWE-287 High
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107817 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-30286		 CWE-78 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107816 - Deserialization of Untrusted Data
CVE-2025-30285		 CWE-502 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107815 - Deserialization of Untrusted Data
CVE-2025-30284		 CWE-502 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107814 - Improper Authentication
CVE-2025-30282		 CWE-287 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 23.04.2025 SB2025042301
#VU107222 - Improper Access Control
CVE-2025-30281		 CWE-284 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301
#VU107221 - Deserialization of Untrusted Data
CVE-2025-24447		 CWE-502 Critical
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301
#VU107220 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-24446		 CWE-22 Low
No
No
 2021 Update 19, 2023 Update 13, 2025 Update 1 08.04.2025 SB2025042301


Showing elements 81 - 100 out of 108