agentprime: adobe-coldfusionEvery new CVE for adobe-coldfusion.https://agentprime.io/CVE-2025-61808: ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)https://agentprime.io/advisories/CVE-2025-61808/https://agentprime.io/advisories/CVE-2025-61808/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.11 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:13 GMTCVEcriticalCVE-2025-61813: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-61813/https://agentprime.io/advisories/CVE-2025-61813/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:12 GMTCVECVE-2025-61812: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-61812/https://agentprime.io/advisories/CVE-2025-61812/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:12 GMTCVECVE-2025-61821: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-61821/https://agentprime.io/advisories/CVE-2025-61821/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:11 GMTCVECVE-2025-64898: ColdFusion | Insufficiently Protected Credentials (CWE-522)https://agentprime.io/advisories/CVE-2025-64898/https://agentprime.io/advisories/CVE-2025-64898/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:10 GMTCVECVE-2025-61810: ColdFusion | Deserialization of Untrusted Data (CWE-502)https://agentprime.io/advisories/CVE-2025-61810/https://agentprime.io/advisories/CVE-2025-61810/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:09 GMTCVECVE-2025-61809: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-61809/https://agentprime.io/advisories/CVE-2025-61809/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:08 GMTCVEcriticalCVE-2025-61822: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-61822/https://agentprime.io/advisories/CVE-2025-61822/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:07 GMTCVECVE-2025-64897: ColdFusion | Improper Access Control (CWE-284)https://agentprime.io/advisories/CVE-2025-64897/https://agentprime.io/advisories/CVE-2025-64897/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:07 GMTCVECVE-2025-61823: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-61823/https://agentprime.io/advisories/CVE-2025-61823/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:06 GMTCVECVE-2025-61811: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)https://agentprime.io/advisories/CVE-2025-61811/https://agentprime.io/advisories/CVE-2025-61811/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Dec 2025 23:41:05 GMTCVEcriticalCVE-2025-54261: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)https://agentprime.io/advisories/CVE-2025-54261/https://agentprime.io/advisories/CVE-2025-54261/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.26 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 16:58:42 GMTCVEcriticalCVE-2025-54234: ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)https://agentprime.io/advisories/CVE-2025-54234/https://agentprime.io/advisories/CVE-2025-54234/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 Aug 2025 16:43:51 GMTCVECVE-2025-49542: ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)https://agentprime.io/advisories/CVE-2025-49542/https://agentprime.io/advisories/CVE-2025-49542/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:41 GMTCVECVE-2025-49535: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-49535/https://agentprime.io/advisories/CVE-2025-49535/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:40 GMTCVEcriticalCVE-2025-49536: ColdFusion | Incorrect Authorization (CWE-863)https://agentprime.io/advisories/CVE-2025-49536/https://agentprime.io/advisories/CVE-2025-49536/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:39 GMTCVECVE-2025-49539: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-49539/https://agentprime.io/advisories/CVE-2025-49539/CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:38 GMTCVECVE-2025-49545: ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)https://agentprime.io/advisories/CVE-2025-49545/https://agentprime.io/advisories/CVE-2025-49545/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:37 GMTCVECVE-2025-49541: ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)https://agentprime.io/advisories/CVE-2025-49541/https://agentprime.io/advisories/CVE-2025-49541/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:36 GMTCVECVE-2025-49537: ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)https://agentprime.io/advisories/CVE-2025-49537/https://agentprime.io/advisories/CVE-2025-49537/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:35 GMTCVECVE-2025-49551: ColdFusion | Use of Hard-coded Credentials (CWE-798)https://agentprime.io/advisories/CVE-2025-49551/https://agentprime.io/advisories/CVE-2025-49551/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:34 GMTCVECVE-2025-49546: ColdFusion | Improper Access Control (CWE-284)https://agentprime.io/advisories/CVE-2025-49546/https://agentprime.io/advisories/CVE-2025-49546/CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:33 GMTCVECVE-2025-49544: ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)https://agentprime.io/advisories/CVE-2025-49544/https://agentprime.io/advisories/CVE-2025-49544/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:32 GMTCVECVE-2025-49543: ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)https://agentprime.io/advisories/CVE-2025-49543/https://agentprime.io/advisories/CVE-2025-49543/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:31 GMTCVECVE-2025-49540: ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)https://agentprime.io/advisories/CVE-2025-49540/https://agentprime.io/advisories/CVE-2025-49540/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:30 GMTCVECVE-2025-49538: ColdFusion | XML Injection (aka Blind XPath Injection) (CWE-91)https://agentprime.io/advisories/CVE-2025-49538/https://agentprime.io/advisories/CVE-2025-49538/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 20:49:29 GMTCVECVE-2025-43565: ColdFusion | Incorrect Authorization (CWE-863)https://agentprime.io/advisories/CVE-2025-43565/https://agentprime.io/advisories/CVE-2025-43565/CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:31 GMTCVEcriticalCVE-2025-43559: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-43559/https://agentprime.io/advisories/CVE-2025-43559/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:30 GMTCVEcriticalCVE-2025-43562: ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)https://agentprime.io/advisories/CVE-2025-43562/https://agentprime.io/advisories/CVE-2025-43562/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.51 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:29 GMTCVEcriticalCVE-2025-43566: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)https://agentprime.io/advisories/CVE-2025-43566/https://agentprime.io/advisories/CVE-2025-43566/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:29 GMTCVECVE-2025-43564: ColdFusion | Incorrect Authorization (CWE-863)https://agentprime.io/advisories/CVE-2025-43564/https://agentprime.io/advisories/CVE-2025-43564/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:28 GMTCVEcriticalCVE-2025-43560: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-43560/https://agentprime.io/advisories/CVE-2025-43560/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.23 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:27 GMTCVEcriticalCVE-2025-43563: ColdFusion | Improper Access Control (CWE-284)https://agentprime.io/advisories/CVE-2025-43563/https://agentprime.io/advisories/CVE-2025-43563/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:26 GMTCVEcriticalCVE-2025-43561: ColdFusion | Incorrect Authorization (CWE-863)https://agentprime.io/advisories/CVE-2025-43561/https://agentprime.io/advisories/CVE-2025-43561/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 20:49:25 GMTCVEcriticalCVE-2025-30287: ColdFusion | Improper Authentication (CWE-287)https://agentprime.io/advisories/CVE-2025-30287/https://agentprime.io/advisories/CVE-2025-30287/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:03:02 GMTCVECVE-2025-30293: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-30293/https://agentprime.io/advisories/CVE-2025-30293/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:03:01 GMTCVECVE-2025-30292: ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)https://agentprime.io/advisories/CVE-2025-30292/https://agentprime.io/advisories/CVE-2025-30292/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:03:00 GMTCVECVE-2025-30290: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)https://agentprime.io/advisories/CVE-2025-30290/https://agentprime.io/advisories/CVE-2025-30290/CVSS 8.7 (High). Critical: CVSS score 8.7 (7.0 or more) and EPSS 0.20 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:59 GMTCVEcriticalCVE-2025-30282: ColdFusion | Improper Authentication (CWE-287)https://agentprime.io/advisories/CVE-2025-30282/https://agentprime.io/advisories/CVE-2025-30282/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:59 GMTCVEcriticalCVE-2025-30284: ColdFusion | Deserialization of Untrusted Data (CWE-502)https://agentprime.io/advisories/CVE-2025-30284/https://agentprime.io/advisories/CVE-2025-30284/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:58 GMTCVECVE-2025-30294: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-30294/https://agentprime.io/advisories/CVE-2025-30294/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:57 GMTCVECVE-2025-30289: ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)https://agentprime.io/advisories/CVE-2025-30289/https://agentprime.io/advisories/CVE-2025-30289/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:56 GMTCVECVE-2025-30288: ColdFusion | Improper Access Control (CWE-284)https://agentprime.io/advisories/CVE-2025-30288/https://agentprime.io/advisories/CVE-2025-30288/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:55 GMTCVECVE-2025-24446: ColdFusion | Improper Input Validation (CWE-20)https://agentprime.io/advisories/CVE-2025-24446/https://agentprime.io/advisories/CVE-2025-24446/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:54 GMTCVEcriticalCVE-2025-24447: ColdFusion | Deserialization of Untrusted Data (CWE-502)https://agentprime.io/advisories/CVE-2025-24447/https://agentprime.io/advisories/CVE-2025-24447/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:52 GMTCVEcriticalCVE-2025-30281: ColdFusion | Improper Access Control (CWE-284)https://agentprime.io/advisories/CVE-2025-30281/https://agentprime.io/advisories/CVE-2025-30281/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:51 GMTCVEcriticalCVE-2025-30291: ColdFusion | Information Exposure (CWE-200)https://agentprime.io/advisories/CVE-2025-30291/https://agentprime.io/advisories/CVE-2025-30291/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:50 GMTCVECVE-2025-30285: ColdFusion | Deserialization of Untrusted Data (CWE-502)https://agentprime.io/advisories/CVE-2025-30285/https://agentprime.io/advisories/CVE-2025-30285/CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.31 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:50 GMTCVEcriticalCVE-2025-30286: ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)https://agentprime.io/advisories/CVE-2025-30286/https://agentprime.io/advisories/CVE-2025-30286/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Apr 2025 20:02:48 GMTCVECVE-2024-53961: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)https://agentprime.io/advisories/CVE-2024-53961/https://agentprime.io/advisories/CVE-2024-53961/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Dec 2024 20:11:38 GMTCVEcritical