Known vulnerabilities in ColdFusion - page 11

Vendor: Adobe
Software: ColdFusion
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 226
Public exploits: 12
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ColdFusion ColdFusion is affected by 226 known vulnerabilities: 15 critical, 61 high, 70 medium, 80 low Critical High Medium Low

Vulnerabilities (226)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU4563 - Authentication Bypass Issues
CVE-2013-0632
CWE-592 Critical
Available
Exploited
- 13.01.2017 SB2013010401
#VU4560 - Exposure of sensitive information to an unauthorized actor
CVE-2013-0631
CWE-200 Medium
No
Exploited
- 13.01.2017 SB2013010401
#VU4559 - Improper Authentication
CVE-2013-0629
CWE-287 Medium
Available
Exploited
- 13.01.2017 SB2013010401
#VU4558 - Authentication Bypass Issues
CVE-2013-0625
CWE-592 Critical
Available
Exploited
- 13.01.2017 SB2013010401
#VU42726 - Improper input validation
CVE-2013-3349
CWE-20 Medium
No
No
- 10.07.2013 SB2012091201
#VU42727 - Improper input validation
CVE-2013-3350
CWE-20 High
No
No
- 10.07.2013 SB2012112001
#VU42926 - Improper input validation
CVE-2013-1387
CWE-20 Medium
No
No
- 10.04.2013 SB2012112001
#VU42927 - Improper input validation
CVE-2013-1388
CWE-20 Medium
No
No
- 10.04.2013 SB2012112001
#VU43257 - Permissions, Privileges, and Access Controls
CVE-2012-5675
CWE-264 Medium
No
No
- 12.12.2012 SB2012112001
#VU43319 - Improper input validation
CVE-2012-5674
CWE-20 Medium
No
No
- 20.11.2012 SB2012112001
#VU43564 - Improper input validation
CVE-2012-2048
CWE-20 Medium
No
No
- 12.09.2012 SB2012091201
#VU44001 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-2041
CWE-94 Medium
No
No
- 13.06.2012 SB2012061302
#VU44204 - Improper input validation
CVE-2012-0770
CWE-20 Medium
No
No
- 14.03.2012 SB2012031402
#VU44447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4368
CWE-79 Low
No
No
- 14.12.2011 SB2011020101
#VU44448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-2463
CWE-79 Low
No
No
- 14.12.2011 SB2011020101
#VU44972 - Cross-Site Request Forgery (CSRF)
CVE-2011-0629
CWE-352 Medium
No
No
- 17.06.2011 SB2011020101
#VU44973 - Improper input validation
CVE-2011-2091
CWE-20 Medium
No
No
- 17.06.2011 SB2011020101
#VU45335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0583
CWE-79 Low
No
No
- 10.02.2011 SB2011020101
#VU45336 - Improper input validation
CVE-2011-0584
CWE-20 Medium
No
No
- 10.02.2011 SB2011020101
#VU45341 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0580
CWE-79 Low
No
No
- 10.02.2011 SB2011020101


Showing elements 201 - 220 out of 226