Security feed

Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution. CISA required action: Apply updates per vendor instructions.

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution. CISA required action: Apply updates per vendor instructions.

An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access. CISA required action: Apply updates per vendor instructions.

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. CISA required action: Apply updates per vendor instructions.

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. CISA required action: Apply updates per vendor instructions.

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. CISA required action: Apply updates per vendor instructions.

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files. CISA required action: Apply updates per vendor instructions.

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitiga…

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitiga…

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user. CISA required action: Apply mitigations per vendor instructions or di…

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigati…

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigati…

Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel. CISA required action: Apply mitigations per ven…

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of t…

Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. CISA required action: Apply mitigations in accordance with vendor instructions,…