UpHeron
All vulnerabilities

Servers and applications

CVE-2021-40699

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

Severity
High 7.4
Published
7 Sept 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2018
Sources
NVD

Affected software

SoftwareAffected versions
Adobe ColdFusionServers and applications · cpe:a:adobe:coldfusion
  • Version 2021
  • Version 2018-update10
  • Version 2018-update9
  • Version 2018-update8
All 13 release lines
  • Every version before 2018
  • Version 2018
  • Version 2018-update1
  • Version 2018-update2
  • Version 2018-update3
  • Version 2018-update4
  • Version 2018-update5
  • Version 2018-update6
  • Version 2018-update7
  • Version 2018-update8
  • Version 2018-update9
  • Version 2018-update10
  • Version 2021

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-40699
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-40699