Adobe / ColdFusion
266 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-76002 | ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) | MEDIUM | 6.1 | Sep 8, 2026 |
| CVE-2026-75746 | ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | CRITICAL | 9.1 | Sep 8, 2026 |
| CVE-2026-76000 | ColdFusion | Uncontrolled Resource Consumption (CWE-400) | MEDIUM | 6.5 | Sep 8, 2026 |
| CVE-2026-75998 | ColdFusion | Improper Access Control (CWE-284) | HIGH | 7.5 | Sep 8, 2026 |
| CVE-2026-48273 | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) | CRITICAL | 9.9 | Sep 8, 2026 |
| CVE-2026-76190 | ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) | HIGH | 8.6 | Sep 8, 2026 |
| CVE-2026-75999 | ColdFusion | Improper Input Validation (CWE-20) | HIGH | 8.4 | Sep 8, 2026 |
| CVE-2026-75993 | ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) | HIGH | 8.5 | Sep 8, 2026 |
| CVE-2026-83961 | ColdFusion | Improper Authentication (CWE-287) | HIGH | 7.1 | Sep 3, 2026 |
| CVE-2026-71387 | ColdFusion | Incorrect Authorization (CWE-863) | HIGH | 8.8 | Aug 11, 2026 |
| CVE-2026-48385 | ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | HIGH | 7.7 | Aug 11, 2026 |
| CVE-2026-71383 | ColdFusion | Incorrect Authorization (CWE-863) | HIGH | 7.3 | Aug 11, 2026 |
| CVE-2026-21279 | ColdFusion | Improper Input Validation (CWE-20) | HIGH | 8.2 | Aug 11, 2026 |
| CVE-2026-48384 | ColdFusion | Improper Input Validation (CWE-20) | MEDIUM | 4.9 | Aug 11, 2026 |
| CVE-2026-48375 | ColdFusion | Incorrect Authorization (CWE-863) | MEDIUM | 6.5 | Aug 11, 2026 |
| CVE-2026-21269 | ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM | 5.4 | Aug 11, 2026 |
| CVE-2026-48376 | ColdFusion | Improper Encoding or Escaping of Output (CWE-116) | MEDIUM | 5.4 | Aug 11, 2026 |
| CVE-2026-48440 | ColdFusion | Heap-based Buffer Overflow (CWE-122) | HIGH | 8.1 | Aug 11, 2026 |
| CVE-2026-34635 | ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321) | HIGH | 8.4 | Aug 11, 2026 |
| CVE-2026-48386 | ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) | HIGH | 7.5 | Aug 11, 2026 |
| CVE-2026-48362 | ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | CRITICAL | 10.0 | Aug 11, 2026 |
| CVE-2026-71386 | ColdFusion | Cross-site Scripting (XSS) (CWE-79) | HIGH | 8.8 | Aug 11, 2026 |
| CVE-2026-71384 | ColdFusion | Incorrect Authorization (CWE-863) | CRITICAL | 9.6 | Aug 11, 2026 |
| CVE-2026-25652 | ColdFusion | Incorrect Authorization (CWE-863) | HIGH | 7.8 | Aug 11, 2026 |
| CVE-2026-21273 | ColdFusion | Improper Input Validation (CWE-20) | HIGH | 8.7 | Aug 11, 2026 |
Showing 1 to 25 of 266 CVEs