Adobe

Coldfusion

226 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2017-3066

Warnung Exploit
  • EPSS 90.6%
  • Veröffentlicht 27.04.2017 14:59:00
  • Zuletzt bearbeitet 22.04.2026 12:14:13

Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code executi...

8.6

CVE-2016-4264

Exploit
  • EPSS 69.04%
  • Veröffentlicht 01.09.2016 23:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via a crafted OOXML spreadsheet containing an external entity...

6.1

CVE-2016-4159

  • EPSS 1.86%
  • Veröffentlicht 16.06.2016 14:59:41
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 20, 11 before Update 9, and 2016 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

5.9

CVE-2016-1115

  • EPSS 2.49%
  • Veröffentlicht 11.05.2016 01:59:44
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 mishandles wildcards in name fields of X.509 certificates, which might allow man-in-the-middle attackers to spoof servers via a crafted certificate.

9.8

CVE-2016-1114

  • EPSS 8.85%
  • Veröffentlicht 11.05.2016 01:59:43
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library.

6.1

CVE-2016-1113

  • EPSS 3.06%
  • Veröffentlicht 11.05.2016 01:59:42
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 19, 11 before Update 8, and 2016 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVE-2015-8053

  • EPSS 3.12%
  • Veröffentlicht 18.11.2015 21:59:03
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8052.

4.3

CVE-2015-8052

  • EPSS 3.12%
  • Veröffentlicht 18.11.2015 21:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 18 and 11 before Update 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-8053.

4.3

CVE-2015-5255

  • EPSS 4.48%
  • Veröffentlicht 18.11.2015 21:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data Services 3.0.x before 3.0.0.354175, 3.1.x before 3.1.0.354180, 4.5.x before 4.5.1.354177, 4.6.2.x before 4.6.2.354178, and 4.7.x before 4.7.0.354178, a...

4.3

CVE-2015-0345

  • EPSS 3.38%
  • Veröffentlicht 15.04.2015 10:59:00
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.