Vulnerabilities
Critical ColdFusion Auth Flaw Allows Arbitrary Code Execution
Adobe ColdFusion faces a CVSS 9.9 vulnerability enabling low-privileged attackers to run arbitrary code without user interaction.
CWE-863
Everything Threat Times has reported about CWE-863: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical ColdFusion Auth Bypass Grants Write Access to Low-Privilege Attackers
Adobe ColdFusion versions through 2025.0.13 and 2023.0.25 contain a critical flaw that allows unauthorized write access without user interaction.
Vulnerabilities
Adobe ColdFusion Faces Critical Auth Flaw Allowing Remote Code Execution
A severe authorization error in Adobe ColdFusion allows attackers to run arbitrary code without user interaction, affecting versions up to 2025.0.13 and 2023.0.25.
Vulnerabilities
Adobe Experience Manager Vulnerability Allows Code Execution Without Interaction
A critical flaw in Adobe Experience Manager permits arbitrary code execution without user interaction, affecting versions up to 6.5.25 and 6.5 LTS SP3.