CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-61821

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and data on the server. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction and scope is changed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 36.1%

CVSS Severity

CVSS v3 Score 6.8

References

https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html

Products affected by CVE-2025-61821

Adobe » Coldfusion » Version: 2021

cpe:2.3:a:adobe:coldfusion:2021
Adobe » Coldfusion » Version: 2023

cpe:2.3:a:adobe:coldfusion:2023
Adobe » Coldfusion » Version: 2025

cpe:2.3:a:adobe:coldfusion:2025

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-61821

Products

Pricing

Contact Us