Known vulnerabilities in ColdFusion - page 10

Vendor: Adobe
Software: ColdFusion
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 226
Public exploits: 12
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ColdFusion ColdFusion is affected by 226 known vulnerabilities: 15 critical, 61 high, 70 medium, 80 low Critical High Medium Low

Vulnerabilities (226)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19805 - Cross-Site Request Forgery (CSRF)
CVE-2016-6635
CWE-352 Medium
No
No
- 02.08.2019 SB2016041209
#VU19799 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5833
CWE-79 Low
No
No
- 02.08.2019 SB2016062106
#VU19800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5834
CWE-79 Low
No
No
- 02.08.2019 SB2016062106
#VU8241 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-11286
CWE-611 Low
No
No
- 12.09.2017 SB2017091204
#VU8240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-11285
CWE-79 Low
No
No
- 12.09.2017 SB2017091204
#VU8239 - Deserialization of Untrusted Data
CVE-2017-11284
CWE-502 High
No
No
- 12.09.2017 SB2017091204
#VU8238 - Deserialization of Untrusted Data
CVE-2017-11283
CWE-502 High
No
No
- 12.09.2017 SB2017091204
#VU6375 - Deserialization of Untrusted Data
CVE-2017-3066
CWE-502 High
Available
Exploited
- 25.04.2017 SB2017042501
#VU6374 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-3008
CWE-79 Low
No
No
- 25.04.2017 SB2017042501
#VU4694 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5328
CWE-200 Low
No
No
- 16.01.2017 SB2013111202
#VU4693 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5326
CWE-79 Low
No
No
- 16.01.2017 SB2013111202
#VU4673 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-3336
CWE-22 High
Available
No
- 16.01.2017 SB2013050801
#VU4663 - Improper input validation
CVE-2013-1389
CWE-20 High
No
No
- 16.01.2017 SB2013051401
#VU366 - Exposure of sensitive information to an unauthorized actor
CVE-2016-4264
CWE-200 Low
Available
No
- 07.09.2016 SB2016090703
#VU5 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-4159
CWE-79 Low
No
No
10 Update 20, 11 Update 9, 2016 Update 2 17.06.2016 SB2016061402
#VU41018 - Improper input validation
CVE-2014-9166
CWE-20 Medium
No
No
- 10.12.2014 SB2014121011
#VU41219 - Cross-Site Request Forgery (CSRF)
CVE-2014-0570
CWE-352 Medium
No
No
- 15.10.2014 SB2014101509
#VU41220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0571
CWE-79 Low
No
No
- 15.10.2014 SB2014101509
#VU41221 - Permissions, Privileges, and Access Controls
CVE-2014-0572
CWE-264 Medium
No
No
- 15.10.2014 SB2014101509
#VU42544 - Credentials Management
CVE-2010-5290
CWE-255 High
No
No
- 20.09.2013 SB2013092001


Showing elements 181 - 200 out of 226