CVE-2025-61812

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction.

Score

CVSS 3.1 8.4 High

Status

Analyzed - psirt@adobe.com

Published

2025-12-10

Last modified

2026-02-26

Weaknesses

CWE-20

Affected products

• Coldfusion (Adobe)

References

• https://helpx.adobe.com/security/products/coldfusion/apsb25-105.html