← Back

Coldfusion

coldfusion

Vendor: Allaire • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Allaire
1Coldfusion
Apr 16, 2026
Dec 31, 1999
N/A· v4
N/A· v3
7.5 HIGH· v2
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the...Show more
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.Show less