Browse CVEs

CRITICAL 9.1 CVE-2025-43561EPSS 21% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43562EPSS 45% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43563EPSS 15% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-30281EPSS 20% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-30282 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-24446 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-24447 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbit… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-24434EPSS 17% Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability th… Commerce Mitigation only Fix from $2,3002025-02-11 CRITICAL 9.3 CVE-2024-54032 Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker… Connect 11.4.9 / 12.7+ Fix from $2,3002024-12-10 CRITICAL 9.3 CVE-2024-54034 Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convi… Connect 11.4.9 / 12.7+ Fix from $2,3002024-12-10 CRITICAL 9.3 CVE-2024-54036 Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker… Connect 11.4.9 / 12.7+ Fix from $2,3002024-12-10 CRITICAL 9.8 CVE-2024-45115 Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could resul… Commerce Mitigation only Fix from $2,3002024-10-10 CRITICAL 9.8 CVE-2024-41874EPSS 30% ColdFusion versions 2023.9, 2021.15 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002024-09-13 CRITICAL 9.0 CVE-2024-39397 Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnera… Commerce after 2.4.3 Fix from $2,3002024-08-14 CRITICAL 9.8 CVE-2024-30300 Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Information Exposure vulnerability (CWE-200) that could lea… Framemaker Publishing Server 2020+ Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-30299 Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in … Framemaker Publishing Server 2020+ Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-34107 Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in… Commerce after 1.4.0 Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-34102 KEVEPSS 100% Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XX… Commerce 1.5.0+ Fix from $2,3002024-06-13 CRITICAL 9.8 CVE-2024-26029 Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature… Experience Manager 6.5.21 / 2024.5+ Fix from $2,3002024-06-13 CRITICAL 9.0 CVE-2024-20758 Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an Improper Input Validation vulnerability that could r… Commerce Mitigation only Fix from $2,3002024-04-10 CRITICAL 9.1 CVE-2024-20719 Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abus… Commerce Mitigation only Fix from $2,3002024-02-15 CRITICAL 9.1 CVE-2024-20720 Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command… Commerce Mitigation only Fix from $2,3002024-02-15 CRITICAL 9.8 CVE-2024-20738 Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Securi… Framemaker Publishing Server 2022+ Fix from $2,3002024-02-15 CRITICAL 9.8 CVE-2023-44350EPSS 65% Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that coul… Coldfusion 2021+ Fix from $2,3002023-11-17 CRITICAL 9.8 CVE-2023-44351EPSS 50% Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that coul… Coldfusion 2021+ Fix from $2,3002023-11-17 CRITICAL 9.8 CVE-2023-44353EPSS 80% Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that coul… Coldfusion 2021+ Fix from $2,3002023-11-17 CRITICAL 9.8 CVE-2023-44324 Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security… Framemaker Publishing Server 2022+ Fix from $2,3002023-11-17 CRITICAL 9.8 CVE-2023-4662 Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion. This issue affects Saphira Connect: bef… Connect 9.0+ Fix from $2,3002023-09-15 CRITICAL 9.8 CVE-2023-4661 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection. … Connect 9.0+ Fix from $2,3002023-09-15 CRITICAL 9.8 CVE-2023-38204EPSS 67% Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vu… Coldfusion Mitigation only Fix from $2,3002023-09-14