Vulnerabilities > CVE-2025-30285 - Unspecified vulnerability in Adobe Coldfusion 2021/2023/2025
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 33 |