CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 11–16 of 16 records

CVE Vendor Product Added Due Status
CVE-2013-0625 — Adobe ColdFusion Authentication Bypass Vulnerability
Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0629 — Adobe ColdFusion Directory Traversal Vulnerability
Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0631 — Adobe ColdFusion Information Disclosure Vulnerability
Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.
 Adobe ColdFusion Mar 7, 2022 Sep 7, 2022
CVE-2013-0632 — Adobe ColdFusion Authentication Bypass Vulnerability
An authentication bypass vulnerability exists in Adobe ColdFusion which could result in an unauthorized user gaining administrative access.
 Adobe ColdFusion Mar 3, 2022 Mar 24, 2022
CVE-2018-15961 — Adobe ColdFusion Unrestricted File Upload Vulnerability
Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.
 Adobe ColdFusion Nov 3, 2021 May 3, 2022
CVE-2018-4939 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.
 Adobe ColdFusion Nov 3, 2021 May 3, 2022