PatchTheCVEallaire vulnerabilities
Recent CVEs affecting allaire products. 3 tracked.
allaire has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2002-06-18. Highest priority: CVE-2002-0108 (score 48/100).
- CVE-2002-0576 MEDIUM 5.0 DOWNGRADE ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .c
- CVE-2002-0108 HIGH 7.5 DOWNGRADE Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as
- CVE-2001-1120 MEDIUM 6.4 DOWNGRADE Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary fi
FAQ
How do I fix allaire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is allaire being exploited right now?
None of the tracked allaire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which allaire CVE should I patch first?
CVE-2002-0108 currently ranks highest (48/100): Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as .