Class familyAdobe · ColdFusion
Adobe ColdFusion path traversal flaws, 2010–2026
22 ColdFusion CVEs with CWE-22 weaknesses, 11 Aug 2010 to 13 Oct 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2010’10
2011’11
2012’12
2013’13
2014’14
2015’15
2016’16
2017’17
2018’18
2019’19
2020’20
2021’21
5 2022’22
1 2023’23
1 2024’24
4 2025’25
10 2026’26
In CISA KEVNot in KEV
20101 CVE, 1 in KEV
20225 CVEs
20231 CVE
20241 CVE
20254 CVEs
202610 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2010-2861KEV | 11 Aug 2010 | Adobe ColdFusion Directory Traversal Vulnerability | Grouped by weakness | 79.9 |
| CVE-2022-38418 | 14 Oct 2022 | Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability | Grouped by weakness | 27.5 |
| CVE-2022-38421 | 14 Oct 2022 | Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability | Grouped by weakness | 25.6 |
| CVE-2022-38422 | 14 Oct 2022 | Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability | Grouped by weakness | 25.0 |
| CVE-2022-38423 | 14 Oct 2022 | Adobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability | Grouped by weakness | 23.2 |
| CVE-2022-38424 | 14 Oct 2022 | Adobe ColdFusion Application Server Directory Traversal Arbitrary file system write | Grouped by weakness | 24.8 |
| CVE-2023-26361 | 23 Mar 2023 | Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability | Grouped by weakness | 23.9 |
| CVE-2024-53961 | 23 Dec 2024 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 25.0 |
| CVE-2025-30290 | 8 Apr 2025 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 25.6 |
| CVE-2025-43566 | 13 May 2025 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 24.6 |
| CVE-2025-54261 | 9 Sep 2025 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 26.6 |
| CVE-2025-61811 | 9 Dec 2025 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 20.0 |
| CVE-2026-27305 | 14 Apr 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 25.6 |
| CVE-2026-34619 | 14 Apr 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 24.3 |
| CVE-2026-47932 | 9 Jun 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 23.2 |
| CVE-2026-48282KEV | 30 Jun 2026 | Adobe ColdFusion Path Traversal Vulnerability | Grouped by weakness | 74.7 |
| CVE-2026-48313 | 30 Jun 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 70.5 |
| CVE-2026-48314 | 30 Jun 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 14.5 |
| CVE-2026-48318 | 14 Jul 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 20.0 |
| CVE-2026-48319 | 14 Jul 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 20.7 |
| CVE-2026-48338 | 14 Jul 2026 | ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | Grouped by weakness | 12.9 |
| CVE-2026-90530 | 13 Oct 2026 | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… | Grouped by weakness | 14.2 |