CVE Lookup
Find one CVE by ID, or search NVD by product, version or words from the description.
Interpreted as product and version: Adobe ColdFusion 2021.
| CVE · title | EVRS | CVSS | EPSS |
|---|---|---|---|
| CVE-2025-49536ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature… | 11 | 7.3 | 0.004 (31.1st pctl) |
| CVE-2025-49535ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that… | 15 | 9.3 | 0.007 (51.6th pctl) |
| CVE-2025-43566ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | 28 | 6.8 | 0.582 (99.1st pctl) |
| CVE-2025-43565ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution… | 19 | 8.4 | 0.184 (97.2nd pctl) |
| CVE-2025-43564ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system… | 19 | 9.1 | 0.168 (97th pctl) |
| CVE-2025-43563ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system… | 19 | 9.1 | 0.167 (97th pctl) |
| CVE-2025-43562ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command… | 30 | 9.1 | 0.510 (98.9th pctl) |
| CVE-2025-43561ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution… | 21 | 9.1 | 0.239 (97.8th pctl) |