Vulnerabilities (CVE)

Filtered by vendor Allaire Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0477 1 Allaire 1 Coldfusion Server 2025-04-03 7.5 HIGH N/A
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
CVE-1999-0924 1 Allaire 1 Coldfusion Server 2025-04-03 5.0 MEDIUM N/A
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
CVE-1999-0455 1 Allaire 1 Coldfusion Server 2025-04-03 7.5 HIGH N/A
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
CVE-2000-0410 1 Allaire 1 Coldfusion Server 2025-04-03 5.0 MEDIUM N/A
ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.