Coldfusion

This hub aggregates every CVE we track for Coldfusion, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Coldfusion.

• CVE-2026-48315ColdFusion | Improper Input Validation (CWE-20)9.3Jun 30, 2026
• CVE-2026-48281ColdFusion | Improper Input Validation (CWE-20)10.0Jun 30, 2026
• CVE-2026-48277ColdFusion | Improper Input Validation (CWE-20)10.0Jun 30, 2026
• CVE-2026-48285ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)8.6Jun 30, 2026
• CVE-2026-48313ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)9.3Jun 30, 2026
• CVE-2026-48307ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)8.8Jun 30, 2026
• CVE-2026-48314ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.5Jun 30, 2026
• CVE-2026-48276ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)10.0Jun 30, 2026
• CVE-2026-48282ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)10.0Jun 30, 2026
• CVE-2026-48283ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)10.0Jun 30, 2026
• CVE-2026-47932ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.8Jun 9, 2026
• CVE-2026-47929ColdFusion | Incorrect Authorization (CWE-863)8.4Jun 9, 2026
• CVE-2026-47960ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)7.4Jun 9, 2026
• CVE-2026-47928ColdFusion | Improper Input Validation (CWE-20)9.6Jun 9, 2026
• CVE-2026-47931ColdFusion | Improper Input Validation (CWE-20)8.4Jun 9, 2026