6.2

CVE-2025-61822

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write. An attacker could exploit this vulnerability to write malicious files to arbitrary locations on the file system. Exploitation of this issue does not require user interaction and scope is changed.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version2021 Update-
Adobe ≫ Coldfusion Version2021 Updateupdate1
Adobe ≫ Coldfusion Version2021 Updateupdate10
Adobe ≫ Coldfusion Version2021 Updateupdate11
Adobe ≫ Coldfusion Version2021 Updateupdate12
Adobe ≫ Coldfusion Version2021 Updateupdate13
Adobe ≫ Coldfusion Version2021 Updateupdate14
Adobe ≫ Coldfusion Version2021 Updateupdate15
Adobe ≫ Coldfusion Version2021 Updateupdate16
Adobe ≫ Coldfusion Version2021 Updateupdate17
Adobe ≫ Coldfusion Version2021 Updateupdate18
Adobe ≫ Coldfusion Version2021 Updateupdate19
Adobe ≫ Coldfusion Version2021 Updateupdate2
Adobe ≫ Coldfusion Version2021 Updateupdate20
Adobe ≫ Coldfusion Version2021 Updateupdate21
Adobe ≫ Coldfusion Version2021 Updateupdate22
Adobe ≫ Coldfusion Version2021 Updateupdate3
Adobe ≫ Coldfusion Version2021 Updateupdate4
Adobe ≫ Coldfusion Version2021 Updateupdate5
Adobe ≫ Coldfusion Version2021 Updateupdate6
Adobe ≫ Coldfusion Version2021 Updateupdate7
Adobe ≫ Coldfusion Version2021 Updateupdate8
Adobe ≫ Coldfusion Version2021 Updateupdate9
Adobe ≫ Coldfusion Version2023 Update-
Adobe ≫ Coldfusion Version2023 Updateupdate1
Adobe ≫ Coldfusion Version2023 Updateupdate10
Adobe ≫ Coldfusion Version2023 Updateupdate11
Adobe ≫ Coldfusion Version2023 Updateupdate12
Adobe ≫ Coldfusion Version2023 Updateupdate13
Adobe ≫ Coldfusion Version2023 Updateupdate14
Adobe ≫ Coldfusion Version2023 Updateupdate15
Adobe ≫ Coldfusion Version2023 Updateupdate16
Adobe ≫ Coldfusion Version2023 Updateupdate2
Adobe ≫ Coldfusion Version2023 Updateupdate3
Adobe ≫ Coldfusion Version2023 Updateupdate4
Adobe ≫ Coldfusion Version2023 Updateupdate5
Adobe ≫ Coldfusion Version2023 Updateupdate6
Adobe ≫ Coldfusion Version2023 Updateupdate7
Adobe ≫ Coldfusion Version2023 Updateupdate8
Adobe ≫ Coldfusion Version2023 Updateupdate9
Adobe ≫ Coldfusion Version2025 Update-
Adobe ≫ Coldfusion Version2025 Updateupdate1
Adobe ≫ Coldfusion Version2025 Updateupdate2
Adobe ≫ Coldfusion Version2025 Updateupdate3
Adobe ≫ Coldfusion Version2025 Updateupdate4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.162
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@adobe.com 6.2 1.7 4
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.