Adobe ColdFusion: known exploited vulnerabilities
Entries16
Ransomware-linked3
First added2021-11-03
Latest2026-07-07
EPSS compared
99.9%
99.9%
99.7%
99.7%
99.7%
98.5%
97.3%
97.0%
93.7%
93.6%
90.5%
66.4%
65.7%
61.9%
42.3%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-48282 | Adobe ColdFusion | 2026-07-07 | 42.3% | Unknown |
| CVE-2017-3066 | Adobe ColdFusion | 2025-02-24 | 90.5% | Unknown |
| CVE-2024-20767 | Adobe ColdFusion | 2024-12-16 | 98.5% | Unknown |
| CVE-2023-38203 | Adobe ColdFusion | 2024-01-08 | 97.0% | Known |
| CVE-2023-29300 | Adobe ColdFusion | 2024-01-08 | 99.9% | Known |
| CVE-2023-26359 | Adobe ColdFusion | 2023-08-21 | 16.9% | Unknown |
| CVE-2023-38205 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-29298 | Adobe ColdFusion | 2023-07-20 | 99.7% | Unknown |
| CVE-2023-26360 | Adobe ColdFusion | 2023-03-15 | 97.3% | Unknown |
| CVE-2010-2861 | Adobe ColdFusion | 2022-03-25 | 99.7% | Known |
| CVE-2013-0631 | Adobe ColdFusion | 2022-03-07 | 66.4% | Unknown |
| CVE-2013-0629 | Adobe ColdFusion | 2022-03-07 | 65.7% | Unknown |
| CVE-2013-0625 | Adobe ColdFusion | 2022-03-07 | 93.7% | Unknown |
| CVE-2013-0632 | Adobe ColdFusion | 2022-03-03 | 93.6% | Unknown |
| CVE-2018-4939 | Adobe ColdFusion | 2021-11-03 | 61.9% | Unknown |
| CVE-2018-15961 | Adobe ColdFusion | 2021-11-03 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.