CVSS: 6.4EPSS: 1%CPEs: 12EXPL: 0CVE-2001-1120
https://notcve.org/view.php?id=CVE-2001-1120
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. • http://www.allaire.com/handlers/index.cfm?id=21566 http://www.kb.cert.org/vuls/id/135531 http://www.securityfocus.com/archive/1/196452 http://www.securityfocus.com/bid/3018 https://exchange.xforce.ibmcloud.com/vulnerabilities/6839 •
CVSS: 10.0EPSS: 1%CPEs: 8EXPL: 0CVE-1999-0760
https://notcve.org/view.php?id=CVE-1999-0760
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. • http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full http://www.securityfocus.com/bid/550 https://exchange.xforce.ibmcloud.com/vulnerabilities/3288 •
CVSS: 5.0EPSS: 2%CPEs: 10EXPL: 1CVE-2000-0538 – ColdFusion Server 2.0/3.x/4.x - Administrator Login Password Denial of Service
https://notcve.org/view.php?id=CVE-2000-0538
ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. • https://www.exploit-db.com/exploits/19996 http://marc.info/?l=bugtraq&m=96045469627806&w=2 http://www.allaire.com/handlers/index.cfm?ID=16122&Method=Full http://www.osvdb.org/3399 http://www.securityfocus.com/bid/1314 https://exchange.xforce.ibmcloud.com/vulnerabilities/4611 •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 1CVE-1999-0477 – Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution
https://notcve.org/view.php?id=CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly. • https://www.exploit-db.com/exploits/19093 http://www.securityfocus.com/bid/115 •