https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-0576.htmlhttps://patchthecve.com/cve/CVE-2002-0576.htmlTue, 16 Jun 2026 21:57:42 +0000MEDIUM 5.0: ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.https://patchthecve.com/cve/CVE-2002-0108.htmlhttps://patchthecve.com/cve/CVE-2002-0108.htmlTue, 16 Jun 2026 21:56:48 +0000HIGH 7.5: Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.https://patchthecve.com/cve/CVE-2001-1120.htmlhttps://patchthecve.com/cve/CVE-2001-1120.htmlTue, 16 Jun 2026 21:55:37 +0000MEDIUM 6.4: Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.https://patchthecve.com/cve/CVE-1999-0924.htmlhttps://patchthecve.com/cve/CVE-1999-0924.htmlTue, 16 Jun 2026 21:49:20 +0000MEDIUM 5.0: The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.https://patchthecve.com/cve/CVE-1999-0923.htmlhttps://patchthecve.com/cve/CVE-1999-0923.htmlTue, 16 Jun 2026 21:49:20 +0000HIGH 7.5: Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.https://patchthecve.com/cve/CVE-1999-0922.htmlhttps://patchthecve.com/cve/CVE-1999-0922.htmlTue, 16 Jun 2026 21:49:20 +0000MEDIUM 5.0: An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.https://patchthecve.com/cve/CVE-1999-0800.htmlhttps://patchthecve.com/cve/CVE-1999-0800.htmlTue, 16 Jun 2026 21:49:05 +0000MEDIUM 5.0: The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.https://patchthecve.com/cve/CVE-1999-0760.htmlhttps://patchthecve.com/cve/CVE-1999-0760.htmlTue, 16 Jun 2026 21:49:00 +0000HIGH 10.0: Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.https://patchthecve.com/cve/CVE-1999-0757.htmlhttps://patchthecve.com/cve/CVE-1999-0757.htmlTue, 16 Jun 2026 21:48:59 +0000LOW 2.1: The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.https://patchthecve.com/cve/CVE-1999-0756.htmlhttps://patchthecve.com/cve/CVE-1999-0756.htmlTue, 16 Jun 2026 21:48:59 +0000MEDIUM 5.0: ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.https://patchthecve.com/cve/CVE-2000-0862.htmlhttps://patchthecve.com/cve/CVE-2000-0862.htmlTue, 16 Jun 2026 21:52:37 +0000MEDIUM 6.4: Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.https://patchthecve.com/cve/CVE-2000-0538.htmlhttps://patchthecve.com/cve/CVE-2000-0538.htmlTue, 16 Jun 2026 21:51:57 +0000MEDIUM 5.0: ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.