CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40698

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.1%

CVSS Severity

CVSS v3 Score 7.4

References

Products affected by CVE-2021-40698

Adobe » Coldfusion » Version: N/A

cpe:2.3:a:adobe:coldfusion:-
Adobe » Coldfusion » Version: 10.0

cpe:2.3:a:adobe:coldfusion:10.0
Adobe » Coldfusion » Version: 11.0

cpe:2.3:a:adobe:coldfusion:11.0
Adobe » Coldfusion » Version: 2016

cpe:2.3:a:adobe:coldfusion:2016
Adobe » Coldfusion » Version: 2018

cpe:2.3:a:adobe:coldfusion:2018
Adobe » Coldfusion » Version: 2021

cpe:2.3:a:adobe:coldfusion:2021
Adobe » Coldfusion » Version: 6.0

cpe:2.3:a:adobe:coldfusion:6.0
Adobe » Coldfusion » Version: 6.1

cpe:2.3:a:adobe:coldfusion:6.1
Adobe » Coldfusion » Version: 7.0

cpe:2.3:a:adobe:coldfusion:7.0
Adobe » Coldfusion » Version: 7.0.1

cpe:2.3:a:adobe:coldfusion:7.0.1
Adobe » Coldfusion » Version: 7.0.2

cpe:2.3:a:adobe:coldfusion:7.0.2
Adobe » Coldfusion » Version: 7.2

cpe:2.3:a:adobe:coldfusion:7.2
Adobe » Coldfusion » Version: 8.0

cpe:2.3:a:adobe:coldfusion:8.0
Adobe » Coldfusion » Version: 8.0.1

cpe:2.3:a:adobe:coldfusion:8.0.1
Adobe » Coldfusion » Version: 9.0

cpe:2.3:a:adobe:coldfusion:9.0
Adobe » Coldfusion » Version: 9.0.1

cpe:2.3:a:adobe:coldfusion:9.0.1
Adobe » Coldfusion » Version: 9.0.2

cpe:2.3:a:adobe:coldfusion:9.0.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40698

Products

Pricing

Contact Us