coldfusion_2025 vulnerabilities

CVEs whose affected-version data names the coldfusion_2025 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

31 CVEsRSS

CVE-2026-105897High· 8.6

2d ago

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

▾ TwilightAdobe · ColdFusion 2025via NVD