CVEvulnerability

CVE-2025-49536

7.3 HIGH Published 2025-07-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-863

Description

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. The vulnerable component is restricted to internal IP addresses.

Affected configurations

• adobe coldfusion 2021 • adobe coldfusion 2023 • adobe coldfusion 2025

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References