Adobe ColdFusion 2021

Name: Adobe ColdFusion 2021
Brand: Adobe

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical1high2medium1low

updated 2026-10-28

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-43564US	critical9.1OT high	16.8% (97th)	Exploit	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-43566US	—	58.2% (99th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-43562US	—	51.0% (99th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-54261US	critical10.0	25.3% (98th)	—	no fix	2025-09-09	≤ vers:unknown/*
CVE-2025-43561US	—OT elevated	23.9% (98th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-43560US	—	22.6% (98th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-43565US	—OT elevated	18.4% (97th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-43563US	critical9.1	16.7% (97th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-61808US	—	10.6% (96th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-61810US	—	9.54% (95th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-61812US	—	4.71% (92nd)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-49537US	—	2.49% (85th)	—	no fix	2025-07-08	2 versions
CVE-2025-49538US	—	2.38% (84th)	—	no fix	2025-07-08	2 versions
CVE-2025-43559US	—	1.64% (76th)	—	no fix	2025-05-13	≤ vers:adobe/<=update19
CVE-2025-49542US	—	1.33% (71st)	—	no fix	2025-07-08	2 versions
CVE-2025-61811US	—	1.20% (68th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-49543US	—	0.88% (59th)	—	no fix	2025-07-08	2 versions
CVE-2025-49541US	—	0.88% (59th)	—	no fix	2025-07-08	2 versions
CVE-2025-49540US	—	0.88% (59th)	—	no fix	2025-07-08	2 versions
CVE-2025-49544US	—	0.74% (55th)	—	no fix	2025-07-08	2 versions
CVE-2025-49535US	—	0.67% (52nd)	—	no fix	2025-07-08	2 versions
CVE-2025-61809US	—	0.66% (51st)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-61822US	—	0.65% (51st)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-49539US	—	0.59% (48th)	—	no fix	2025-07-08	2 versions
CVE-2025-61813US	high7.4	0.55% (46th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-61821US	medium6.8	0.53% (44th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-61823US	—	0.49% (42nd)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-49546US	low2.4	0.48% (41st)	—	no fix	2025-07-08	2 versions
CVE-2025-64898US	medium5.3	0.44% (38th)	—	no fix	2025-12-10	≤ vers:unknown/*
CVE-2025-49545US	—	0.44% (38th)	—	no fix	2025-07-08	2 versions
CVE-2025-49536US	—OT elevated	0.38% (32nd)	—	no fix	2025-07-08	2 versions
CVE-2025-49551US	—OT elevated	0.34% (27th)	—	no fix	2025-07-08	2 versions
CVE-2025-61830US	—OT elevated	0.25% (16th)	—	no fix	2025-11-11	≤ vers:unknown/*
CVE-2025-64897US	—	0.13% (3rd)	—	no fix	2025-12-10	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-611Improper Restriction of XML External Entity Reference6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-863Incorrect Authorization5 CVEs
CWE-284Improper Access Control4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan