Vulnerabilities
CVSS 9.3: Adobe ColdFusion 2023/2025 Patched for Critical Unauthenticated RDS Path Traversal
A critical path traversal bug in Adobe ColdFusion RDS allows attackers to read files without login credentials or user interaction.
Adobe ColdFusion
Everything Patch Herald has reported about Adobe ColdFusion: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.6 ColdFusion Flaw Lets Low-Priv Users Write Data Without Interaction
Adobe ColdFusion versions up to 2025.0.13 and 2023.0.25 face a critical authorization bypass that requires no user action to exploit.
Vulnerabilities
CVSS 9.9 Critical Code Injection Flaw Hits Adobe ColdFusion 2023 and 2025
Low-privilege attackers can run code on vulnerable ColdFusion servers without user interaction, per National Vulnerability Database records.