Browse CVEs

HIGH 8.4 CVE-2025-61812 ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privilege… Coldfusion Mitigation only Fix from $1,9502025-12-10 HIGH 7.4 CVE-2025-61813 ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabili… Coldfusion Mitigation only Fix from $1,9502025-12-10 MEDIUM 5.5 CVE-2025-61842 Format Plugins versions 1.1.1 and earlier are affected by a Use After Free vulnerability that could lead to memory exposure. An attacker could levera… Format Plugins Mitigation only Fix from $1,6002025-11-11 MEDIUM 5.5 CVE-2025-61843 Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could l… Format Plugins Mitigation only Fix from $1,6002025-11-11 MEDIUM 5.5 CVE-2025-61844 Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could l… Format Plugins Mitigation only Fix from $1,6002025-11-11 MEDIUM 5.5 CVE-2025-61845 Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could l… Format Plugins Mitigation only Fix from $1,6002025-11-11 HIGH 7.8 CVE-2025-61837 Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Format Plugins Mitigation only Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61838 Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in… Format Plugins Mitigation only Fix from $1,9502025-11-11 HIGH 7.8 CVE-2025-61839 Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a re… Format Plugins Mitigation only Fix from $1,9502025-11-11 MEDIUM 5.5 CVE-2025-61840 Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could l… Format Plugins Mitigation only Fix from $1,6002025-11-11 MEDIUM 5.5 CVE-2025-61841 Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could l… Format Plugins Mitigation only Fix from $1,6002025-11-11 MEDIUM 5.4 CVE-2025-54272 Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low pr… Experience Manager Mitigation only Fix from $1,6002025-10-14 MEDIUM 5.4 CVE-2025-61796 Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low pr… Experience Manager Mitigation only Fix from $1,6002025-10-14 MEDIUM 5.4 CVE-2025-61797 Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low pr… Experience Manager Mitigation only Fix from $1,6002025-10-14 HIGH 8.1 CVE-2025-54264 Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (… Commerce Mitigation only Fix from $1,9502025-10-14 MEDIUM 6.5 CVE-2025-54267 Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vuln… Commerce Mitigation only Fix from $1,6002025-10-14 MEDIUM 5.9 CVE-2025-54265 Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vuln… Commerce Mitigation only Fix from $1,6002025-10-14 HIGH 8.1 CVE-2025-54263 Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vuln… Commerce Mitigation only Fix from $1,9502025-10-14 CRITICAL 10.0 CVE-2025-54261EPSS 21% ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traver… Coldfusion Mitigation only Fix from $2,3002025-09-09 CRITICAL 9.1 CVE-2025-54236 KEVEPSS 95% Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vu… Commerce Mitigation only Fix from $2,3002025-09-09 MEDIUM 5.4 CVE-2025-49534 Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-… Experience Manager Mitigation only Fix from $1,6002025-07-08 MEDIUM 5.4 CVE-2025-49547 Adobe Experience Manager versions FP11.4 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-… Experience Manager Mitigation only Fix from $1,6002025-07-08 HIGH 8.8 CVE-2025-49551 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in privilege… Coldfusion Mitigation only Fix from $1,9502025-07-08 MEDIUM 6.8 CVE-2025-49544 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabili… Coldfusion Mitigation only Fix from $1,6002025-07-08 MEDIUM 6.2 CVE-2025-49545 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitr… Coldfusion Mitigation only Fix from $1,6002025-07-08 MEDIUM 5.2 CVE-2025-49542 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated … Coldfusion Mitigation only Fix from $1,6002025-07-08 CRITICAL 9.3 CVE-2025-49535 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerabili… Coldfusion Mitigation only Fix from $2,3002025-07-08 HIGH 7.9 CVE-2025-49537 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co… Coldfusion Mitigation only Fix from $1,9502025-07-08 HIGH 7.4 CVE-2025-49538 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an XML Injection vulnerability that could lead to arbitrary file system read… Coldfusion Mitigation only Fix from $1,9502025-07-08 HIGH 7.3 CVE-2025-49536 ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security fea… Coldfusion Mitigation only Fix from $1,9502025-07-08