Known vulnerabilities in ColdFusion 2025 Update 5 - page 4

Vendor: Adobe
Software: ColdFusion
Version: 2025 Update 5
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 62
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2025 Update 5 ColdFusion 2025 Update 5 is affected by 62 vulnerabilities: 6 critical, 16 high, 22 medium, 18 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126087 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34619
CWE-22 Medium
No
No
2023 Update 19, 2025 Update 7 15.04.2026 SB2026041503
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Public exploit available
Exploited
2023 Update 18, 2025 Update 6 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 33 more


Showing elements 61 - 80 out of 62