Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
A CVSS 9.9 eval injection vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.
A CVSS 9.6 incorrect authorization vulnerability in Adobe ColdFusion that could cause application denial-of-service. Fixed in versions 2025.0.12 and 2023.0.23.
Adobe ColdFusion is a commercial rapid web application development platform. Recent updates address critical vulnerabilities including command injection and eval injection.
Adobe ColdFusion Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
Adobe has released critical security updates addressing multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic. The patches fix seven CVSS…
Adobe ColdFusion is an application server affected by CVE-2026-48282, a path traversal vulnerability with a CVSS score of 10.0 that is actively…