On July 11, 2023, Adobe released patches for several vulnerabilities affecting ColdFusion, including a Rapid7-discovered access control bypass vulnerability (CVE-2023-29298) and an insecure ...

Krebs says the hackers grabbed source code for “an as-yet undetermined number of software titles, including [Adobe’s] ColdFusion Web application platform, and possibly its Acrobat family of ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given federal agencies three weeks to secure Adobe ColdFusion servers on their networks against two critical security flaws ...

Both incidents targeted outdated and unpatched ColdFusion servers and exploited a known vulnerability.

Fortinet has observed significant threat exploitation targeting Adobe ColdFusion, a web development computing platform. This is despite a series of security updates (APSB23-40, APSB23-41, and ...