References https://www.hkcert.org/tc/security-bulletin/adobe-coldfusion-information-disclosure-vulnerability_20241224 https://xjzx.ccit.edu.cn/info/1007/2550.htm https://www.cnvd.org.cn/flaw/show/CNVD-2025-07807 https://www.secrss.com/articles/64734 https://blog.nsfocus.net/%E3%80%90%E6%BC%8F%E6%B4%9E%E9%80%9A%E5%91%8A%E3%80%91adobe-coldfusion%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%EF%BC%88cve-2024-53961%EF%BC%89/ http://www.jhu.cn/B08XXTWZX/show.aspx?TypeID=56&ID=1156 https://stack.chaitin.com/vuldb/detail/3efcaf47-70a4-4980-b88a-5fbe7ae87f0a https://helpx.adobe.com/cn/security/products/coldfusion/apsb18-14.html https://www.tenablecloud.cn/plugins/nessus/66526 https://www.wyu.edu.cn/dio/info/1701/2142.htm https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-339a https://nic.seu.edu.cn/info/1047/1258.htm https://github.com/tzwlhack/Vulnerability/blob/main/Adobe%20ColdFusion%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2021-21087%EF%BC%89.md https://www.hkcert.org/tc/security-bulletin/adobe-coldfusion-multiple-vulerabilities https://www.picussecurity.com/resource/blog/cve-2023-26360-adobe-coldfusion-servers-exploited-for-initial-access https://bbs.kanxue.com/thread-284997.htm https://www.venustech.com.cn/new_type/aqtg/20210323/22534.html https://www.ithome.com.tw/news/172759 https://www.facebook.com/twcertcc/posts/%E8%B3%87%E8%A8%8A%E7%94%A2%E5%93%81%E6%BC%8F%E6%B4%9Eadobe%E7%99%BC%E4%BD%88coldfusion%E5%AE%89%E5%85%A8%E6%9B%B4%E6%96%B0%E8%A9%B2%E6%BC%8F%E6%B4%9E%E6%9C%83%E5%B0%8E%E8%87%B4%E8%B3%87%E6%96%99%E5%A4%96%E6%B4%A9%E6%A6%82%E8%BF%B0adobe-coldfusion%E6%98%AF%E4%B8%80%E5%80%8B%E5%8B%95%E6%85%8Bweb%E6%9C%8D%E5%8B%99%E5%99%A8%E5%A6%82%E6%9C%83%E5%B0%8E%E8%87%B4%E8%B3%87%E6%96%B0%E8%A9%B2%E6%BC%8F%E6%B4%9E%E6%9C%83%E5%B0%8E%E8%87%B4%E8%B3%87%E6%96%B0%E4%BF%AE%E8%A3%9C%E4%BA%86coldf/1817424978487239/ https://xxzx.jou.edu.cn/info/1168/1672.htm https://qkl.seebug.org/vuldb/ssvid-4419 https://www.sxxdckj.com/cms/a/Adobe-ColdFusion-xin-xi-xie-lou-lou-dong.html https://www.fortinet.com/blog/threat-research/multiple-threats-target-adobe-coldfusion-vulnerabilities https://wxzx.hueb.edu.cn/wlaq/info/1005/1222.htm https://cve.imfht.com/detail/CVE-2019-8072 https://www.rapid7.com/blog/post/2023/03/21/etr-rapid7-observed-exploitation-of-adobe-coldfusion/ https://cve.circl.lu/vuln/cnvd-2025-10394 https://teamt5.org/tw/posts/alerts-of-exploiting-adobe-cold-fusion-cve-2023-29300/ https://avd.aliyun.com/detail?id=AVD-2017-11284 https://www.4hou.com/posts/8gYW https://helpx.adobe.com/security/products/coldfusion.html https://docs.indusface.com/en/article/adobe-coldfusion-vulnerabilities-exploited-in-the-wild https://www.hkcert.org/security-bulletin/adobe-coldfusion-information-disclosure-vulnerability https://www.sentinelone.com/vulnerability-database/cve-2024-20767/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=coldfusion&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url= https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html https://nvd.nist.gov/vuln/detail/cve-2024-53961 https://fortiguard.fortinet.com/encyclopedia/ips/52206 https://trustedsec.com/blog/full-disclosure-adobe-coldfusion-path-traversal-cve-2010-2861 https://www.sentinelone.com/vulnerability-database/cve-2024-34112/ https://www.rapid7.com/blog/post/2023/07/11/cve-2023-29298-adobe-coldfusion-access-control-bypass/ https://community.adobe.com/questions-582/jetty-vulnerabilities-in-coldfusion-2018-273295 https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html https://www.ibm.com/think/x-force/fysa-adobe-cold-fusion-path-traversal-vulnerability https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2013-3790.html/ https://hackerone.com/reports/2870951 https://isc.sans.edu/diary/8128 https://www.scworld.com/brief/adobe-issued-hotfix-for-critical-information-disclosure-vulnerability-in-coldfusion https://www.reddit.com/r/pwnhub/comments/1toy3wh/adobe_coldfusion_security_update_addresses/ https://www.keysight.com/blogs/en/tech/nwvs/2025/03/18/cve-2017-3066 https://www.zerodayinitiative.com/advisories/ZDI-22-1414/ https://www.sangfor.com/blog/cybersecurity/adobe-coldfusion-arbitrary-file-read-and-arbitrary-file-inclusion-vulnerability https://www.linkedin.com/posts/cybercureme_adobe-warns-of-coldfusion-vulnerability-allows-activity-7277969186864197632-DoZi
Related VulnerabilitiesPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File WritePoCCVE-2026-48313: ColdFusion - Path TraversalAdobe Acrobat Reader 远程代码执行漏洞(CVE-2026-34621)PoCCVE-2025-49533: Adobe Experience Manager Forms - Insecure DeserializationPoCcoldfusion-cfide-dir-listing: Adobe ColdFusion CFIDE - Directory ListingPoCaem-jcr-exposure: Adobe AEM JCR Compare ExposurePoCaem-anonymous-write: Adobe Experience Manager (AEM) - Anonymous JCR Node CreationAdobe Commerce/Magento SessionReaper /customer/address_file/upload 文件上传漏洞(CVE-2025-54236)Adobe ColdFusion /hax/..CFIDE/wizards/common/utils.cfc 权限绕过漏洞(CVE-2023-38205)(CVE-2025-54253)Adobe Experience Manager配置错误导致任意代码执行漏洞