Known vulnerabilities in ColdFusion - page 10

Vendor: Adobe
Software: ColdFusion
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 218
Public exploits: 12
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ColdFusion ColdFusion is affected by 218 known vulnerabilities: 15 critical, 60 high, 64 medium, 79 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19805 - Cross-Site Request Forgery (CSRF)
CVE-2016-6635
CWE-352 Medium
No
No
- 02.08.2019 SB2016041209
#VU19800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-5834
CWE-79 Low
No
No
- 02.08.2019 SB2016062106
#VU4694 - Exposure of sensitive information to an unauthorized actor
CVE-2013-5328
CWE-200 Low
No
No
- 16.01.2017 SB2013111202
#VU4693 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-5326
CWE-79 Low
No
No
- 16.01.2017 SB2013111202
#VU4673 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-3336
CWE-22 High
Available
No
- 16.01.2017 SB2013050801
#VU4663 - Improper input validation
CVE-2013-1389
CWE-20 High
No
No
- 16.01.2017 SB2013051401
#VU4563 - Authentication Bypass Issues
CVE-2013-0632
CWE-592 Critical
Available
Exploited
- 13.01.2017 SB2013010401
#VU4560 - Exposure of sensitive information to an unauthorized actor
CVE-2013-0631
CWE-200 Medium
No
Exploited
- 13.01.2017 SB2013010401
#VU4559 - Improper Authentication
CVE-2013-0629
CWE-287 Medium
Available
Exploited
- 13.01.2017 SB2013010401
#VU4558 - Authentication Bypass Issues
CVE-2013-0625
CWE-592 Critical
Available
Exploited
- 13.01.2017 SB2013010401
#VU5 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-4159
CWE-79 Low
No
No
10 Update 20, 11 Update 9, 2016 Update 2 17.06.2016 SB2016061402
#VU41018 - Improper input validation
CVE-2014-9166
CWE-20 Medium
No
No
- 10.12.2014 SB2014121011
#VU41219 - Cross-Site Request Forgery (CSRF)
CVE-2014-0570
CWE-352 Medium
No
No
- 15.10.2014 SB2014101509
#VU41220 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0571
CWE-79 Low
No
No
- 15.10.2014 SB2014101509
#VU41221 - Permissions, Privileges, and Access Controls
CVE-2014-0572
CWE-264 Medium
No
No
- 15.10.2014 SB2014101509
#VU42544 - Credentials Management
CVE-2010-5290
CWE-255 High
No
No
- 20.09.2013 SB2013092001
#VU42727 - Improper input validation
CVE-2013-3350
CWE-20 High
No
No
- 10.07.2013 SB2012112001
#VU42926 - Improper input validation
CVE-2013-1387
CWE-20 Medium
No
No
- 10.04.2013 SB2012112001
#VU42927 - Improper input validation
CVE-2013-1388
CWE-20 Medium
No
No
- 10.04.2013 SB2012112001
#VU43257 - Permissions, Privileges, and Access Controls
CVE-2012-5675
CWE-264 Medium
No
No
- 12.12.2012 SB2012112001


Showing elements 181 - 200 out of 218