Browse CVEs

HIGH 8.4 CVE-2025-47110 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerabilit… Commerce Mitigation only Fix from $1,9502025-06-10 HIGH 8.2 CVE-2025-43585 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that cou… Commerce Mitigation only Fix from $1,9502025-06-10 HIGH 8.1 CVE-2025-43586 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that co… Commerce Mitigation only Fix from $1,9502025-06-10 MEDIUM 6.5 CVE-2025-27207 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that co… Commerce B2b Mitigation only Fix from $1,6002025-06-10 MEDIUM 5.3 CVE-2025-27206 Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that co… Commerce Mitigation only Fix from $1,6002025-06-10 CRITICAL 9.1 CVE-2025-43564EPSS 15% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file… Coldfusion Mitigation only Fix from $2,3002025-05-13 HIGH 8.4 CVE-2025-43565EPSS 16% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code e… Coldfusion Mitigation only Fix from $1,9502025-05-13 MEDIUM 6.8 CVE-2025-43566EPSS 55% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traver… Coldfusion Mitigation only Fix from $1,6002025-05-13 CRITICAL 9.1 CVE-2025-43559 ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43560EPSS 19% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43561EPSS 21% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43562EPSS 45% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co… Coldfusion Mitigation only Fix from $2,3002025-05-13 CRITICAL 9.1 CVE-2025-43563EPSS 15% ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file… Coldfusion Mitigation only Fix from $2,3002025-05-13 MEDIUM 5.3 CVE-2025-27190 Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability th… Commerce Mitigation only Fix from $1,6002025-04-08 MEDIUM 6.8 CVE-2025-30293 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security f… Coldfusion Mitigation only Fix from $1,6002025-04-08 MEDIUM 6.8 CVE-2025-30294EPSS 16% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security f… Coldfusion Mitigation only Fix from $1,6002025-04-08 MEDIUM 6.1 CVE-2025-30292EPSS 15% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able… Coldfusion Mitigation only Fix from $1,6002025-04-08 MEDIUM 5.5 CVE-2025-30291 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Information Exposure vulnerability that could result in a security featur… Coldfusion Mitigation only Fix from $1,6002025-04-08 HIGH 8.7 CVE-2025-30290EPSS 18% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traver… Coldfusion Mitigation only Fix from $1,9502025-04-08 HIGH 8.4 CVE-2025-30285EPSS 27% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbit… Coldfusion Mitigation only Fix from $1,9502025-04-08 HIGH 8.4 CVE-2025-30286 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co… Coldfusion Mitigation only Fix from $1,9502025-04-08 HIGH 8.2 CVE-2025-30287 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $1,9502025-04-08 HIGH 8.2 CVE-2025-30288 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security fea… Coldfusion Mitigation only Fix from $1,9502025-04-08 HIGH 8.2 CVE-2025-30289EPSS 5% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co… Coldfusion Mitigation only Fix from $1,9502025-04-08 CRITICAL 9.1 CVE-2025-30281EPSS 20% ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-30282 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitrary code… Coldfusion Mitigation only Fix from $2,3002025-04-08 HIGH 8.4 CVE-2025-30284 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbit… Coldfusion Mitigation only Fix from $1,9502025-04-08 CRITICAL 9.1 CVE-2025-24446 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary co… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-24447 ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbit… Coldfusion Mitigation only Fix from $2,3002025-04-08 CRITICAL 9.1 CVE-2025-24434EPSS 17% Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability th… Commerce Mitigation only Fix from $2,3002025-02-11