Critical severity9.1NVD Advisory· Published Apr 8, 2025· Updated Jun 17, 2026
CVE-2025-30281
CVE-2025-30281
Description
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed.
Affected products
35<=2023.12, <=2021.18, <=2025.0+ 34 more
- (no CPE)range: <=2023.12, <=2021.18, <=2025.0
- (no CPE)range: 0
- cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update12:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update13:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update14:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update15:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update16:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update17:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update18:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2021:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/coldfusion/apsb25-15.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.