CVE Lookup
Find one CVE by ID, or search NVD by product, version or words from the description.
Interpreted as product and version: Adobe ColdFusion 2021.
| CVE · title | EVRS | CVSS | EPSS |
|---|---|---|---|
| CVE-2025-49544ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that… | 11 | 6.8 | 0.007 (54.3rd pctl) |
| CVE-2025-49543ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a… | 7 | 4.3 | 0.009 (58.7th pctl) |
| CVE-2025-49542ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. | 8 | 5.2 | 0.013 (70.8th pctl) |
| CVE-2025-49541ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a… | 7 | 4.3 | 0.009 (58.7th pctl) |
| CVE-2025-49540ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a… | 7 | 4.3 | 0.009 (58.7th pctl) |
| CVE-2025-49539ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that… | 7 | 4.5 | 0.006 (47.7th pctl) |
| CVE-2025-49538ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read. | 12 | 7.4 | 0.024 (83.8th pctl) |
| CVE-2025-49537ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command… | 13 | 7.9 | 0.025 (84.5th pctl) |