Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-61812

ColdFusion | Improper Input Validation (CWE-20)

Description

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe ColdFusion

Default version status: affected

  • 0 to ≤ 2021.22affected

References