Allaire
Allaire Coldfusion Server: vulnerabilidades y CVE
Allaire Coldfusion Server tiene 14 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2002-0576 | Media (5) | 2.7% | — | 18 jun 2002 | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the… |
| CVE-2001-1120 | Media (6.4) | 1.9% | — | 11 jul 2001 | Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. |
| CVE-1999-0924 | Media (5) | 1.6% | — | 12 mar 2001 | The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. |
| CVE-1999-0757 | Baja (2.1) | 0.53% | — | 12 mar 2001 | The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. |
| CVE-1999-0760 | Alta (10) | 1.7% | — | 12 mar 2001 | Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. |
| CVE-1999-0922 | Media (5) | 1.3% | — | 12 mar 2001 | An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. |
| CVE-1999-0923 | Alta (7.5) | 1.4% | — | 12 mar 2001 | Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls. |
| CVE-1999-0756 | Media (5) | 1.3% | — | 12 mar 2001 | ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. |
| CVE-2000-0538 | Media (5) | 8.4% | — | 7 jun 2000 | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. |
| CVE-2000-0410 | Media (5) | 1.3% | — | 10 may 2000 | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory. |
| CVE-2000-0189 | Media (5) | 1.9% | — | 1 mar 2000 | ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. |
| CVE-2000-0057 | Alta (7.5) | 5.5% | — | 4 ene 2000 | Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. |
| CVE-1999-0477 | Alta (7.5) | 5.3% | — | 25 dic 1999 | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly. |
| CVE-1999-0455 | Alta (7.5) | 5.8% | — | 25 dic 1999 | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly. |