Coldfusion Server

Vendor:

First CVE: Dec 25, 1999 · Active for 26 years

Total CVEs

More Total CVEs than 91% of tracked products

3.5

Avg CVEs / Year

Higher CVE frequency than 82% of tracked products

6.0

Avg CVSS

Higher Avg CVSS than 20% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Coldfusion Server over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 25, 1999

26 years ago

Most Recent CVE

Jun 18, 2002

8,805 days ago

CVE Severity & Scoring

Coldfusion Server14 CVEs

57%

36%

All CVEs352,785 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown14 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown14 (100.0%)

User Interaction

None0 (0.0%)

Unknown14 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown14 (100.0%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-1999-0477HIGH The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server	Dec 25, 1999	7.5	32	NO	YES
CVE-2000-0057HIGH Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information.	Jan 4, 2000	7.5	30	NO	YES
CVE-1999-0455HIGH The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the serv	Dec 25, 1999	7.5	30	NO	YES
CVE-1999-0760HIGH Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.	Mar 12, 2001	10.0	25	NO	NO
CVE-2000-0538MEDIUM ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.	Jun 7, 2000	5.0	25	NO	YES
CVE-2001-1120MEDIUM Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.	Jul 11, 2001	6.4	22	NO	NO
CVE-2002-0576MEDIUM ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device na	Jun 18, 2002	5.0	19	NO	NO
CVE-1999-0923HIGH Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.	Mar 12, 2001	7.5	19	NO	NO
CVE-1999-0757LOW The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.	Mar 12, 2001	2.1	17	NO	YES
CVE-1999-0756MEDIUM ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.	Mar 12, 2001	5.0	15	NO	NO

View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

5 CVEs

35.7% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Coldfusion Server

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
5.0	1	5.0	2.6%	0
4.5.1_sp2	1	6.4	1.9%	0
4.5.1_sp1	1	6.4	1.9%	0
4.5.1	3	5.5	3.9%	1
4.5	4	5.3	3.7%	1
4.0.1	6	6.5	3.5%	2
4.0	12	6.4	3.3%	4
3.1.2	2	8.2	1.8%	0
3.12	2	6.3	6.9%	2
3.1.1	2	8.2	1.8%	0
3.11	2	6.3	6.9%	2
3.1	3	7.1	4.0%	1
3.0.1	2	8.2	1.8%	0
3.01	2	6.3	6.9%	2
3.0	4	7.2	4.4%	2
2.0	4	7.2	4.4%	2