allaire coldfusion server

Name: allaire coldfusion server
Brand: allaire

productUS

cpe:2.3:a:allaire:coldfusion_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical5high8medium1low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2000-0538US	medium5.0	8.43% (95th)	Exploit	no fix	2000-06-07	10 versions
CVE-1999-0455US	high7.5	5.85% (93rd)	Exploit	no fix	1999-12-25	= 4.0
CVE-2000-0057US	high7.5	5.55% (93rd)	Exploit	no fix	2000-01-04	2 versions
CVE-1999-0477US	high7.5	5.33% (93rd)	Exploit	no fix	1999-12-25	6 versions
CVE-1999-0757US	low2.1	0.53% (44th)	Exploit	no fix	2001-03-12	—
CVE-2002-0576US	medium5.0	2.65% (86th)	—	no fix	2002-06-18	3 versions
CVE-2000-0189US	medium5.0	1.93% (80th)	—	no fix	2000-03-01	3 versions
CVE-2001-1120US	medium6.4	1.93% (80th)	—	no fix	2001-07-11	12 versions
CVE-1999-0760US	high10.0	1.74% (78th)	—	no fix	2001-03-12	8 versions
CVE-1999-0924US	medium5.0	1.61% (76th)	—	no fix	2001-03-12	= 4.0
CVE-1999-0923US	high7.5	1.37% (72nd)	—	no fix	2001-03-12	= 4.0
CVE-2000-0410US	medium5.0	1.34% (71st)	—	no fix	2000-05-10	= 4.5.1
CVE-1999-0922US	medium5.0	1.32% (71st)	—	no fix	2001-03-12	= 4.0
CVE-1999-0756US	medium5.0	1.26% (69th)	—	no fix	2001-03-12	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.