VULNERABILITY INTELLIGENCE

CVE-2025-61812

CVSS score8.4 HIGH
EPSS probability4.71%
CISA KEVNot currently listed
Published2025-12-10
Last modified2026-09-25
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could allow a high privileged attacker to gain arbitrary code execution. Exploitation of this issue does not require user interaction.

Weakness classification

  • psirt@adobe.com: CWE-20

Primary references