Known vulnerabilities in ColdFusion - page 11

Vendor: Adobe
Software: ColdFusion
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 218
Public exploits: 12
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ColdFusion ColdFusion is affected by 218 known vulnerabilities: 15 critical, 60 high, 64 medium, 79 low Critical High Medium Low

Vulnerabilities (218)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104114 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2009-3960
CWE-611 High
Available
Exploited
- 21.02.2025 SB2010021101
SB2010021102
SB2010021103
and 2 more
#VU56825 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2010-2861
CWE-22 High
Available
Exploited
9.0.1 22.09.2021 SB2010081102
#VU42726 - Improper input validation
CVE-2013-3349
CWE-20 Medium
No
No
- 10.07.2013 SB2012091201
#VU43319 - Improper input validation
CVE-2012-5674
CWE-20 Medium
No
No
- 20.11.2012 SB2012112001
#VU43564 - Improper input validation
CVE-2012-2048
CWE-20 Medium
No
No
- 12.09.2012 SB2012091201
#VU44001 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-2041
CWE-94 Medium
No
No
- 13.06.2012 SB2012061302
#VU44204 - Improper input validation
CVE-2012-0770
CWE-20 Medium
No
No
- 14.03.2012 SB2012031402
#VU44447 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4368
CWE-79 Low
No
No
- 14.12.2011 SB2011020101
#VU44448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-2463
CWE-79 Low
No
No
- 14.12.2011 SB2011020101
#VU44972 - Cross-Site Request Forgery (CSRF)
CVE-2011-0629
CWE-352 Medium
No
No
- 17.06.2011 SB2011020101
#VU44973 - Improper input validation
CVE-2011-2091
CWE-20 Medium
No
No
- 17.06.2011 SB2011020101
#VU45335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0583
CWE-79 Low
No
No
- 10.02.2011 SB2011020101
#VU45336 - Improper input validation
CVE-2011-0584
CWE-20 Medium
No
No
- 10.02.2011 SB2011020101
#VU45341 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0580
CWE-79 Low
No
No
- 10.02.2011 SB2011020101
#VU45342 - Improper input validation
CVE-2011-0581
CWE-20 Medium
No
No
- 10.02.2011 SB2011020101
#VU45343 - Improper input validation
CVE-2011-0582
CWE-20 Medium
No
No
- 10.02.2011 SB2011020101
#VU45398 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0734
CWE-79 Low
No
No
- 01.02.2011 SB2011020101
#VU45399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-0735
CWE-79 Low
No
No
- 01.02.2011 SB2011020101


Showing elements 201 - 220 out of 218