Vulnerabilities > CVE-2025-30293 - Unspecified vulnerability in Adobe Coldfusion 2021/2023/2025

047910
CVSS 7.1 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
adobe

Summary

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access. Exploitation of this issue does not require user interaction and scope is changed.

Vulnerable Configurations

Part Description Count
Application
Adobe
33