Vulnerabilities (CVE)

Filtered by vendor Allaire Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0757 1 Allaire 1 Coldfusion Server 2024-11-20 2.1 LOW N/A
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
CVE-1999-0756 1 Allaire 1 Coldfusion Server 2024-11-20 5.0 MEDIUM N/A
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
CVE-1999-0477 1 Allaire 1 Coldfusion Server 2024-11-20 7.5 HIGH N/A
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
CVE-1999-0455 1 Allaire 1 Coldfusion Server 2024-11-20 7.5 HIGH N/A
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.