CVE-2014-0572

MEDIUM 4.6CVE-2014-0572 · Published 15/10/2014 · updated 17/06/2026

In short

CVE-2014-0572 is a MEDIUM (CVSS 4.6) vulnerability affecting coldfusion (adobe).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
coldfusion adobe	`= 10.0= 11.0= 9.0= 9.0.1= 9.0.2`	No fix yet

Description

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors.

References

helpx.adobe.com/security/products/coldfusion/apsb14-23.html · Patch
securitytracker.com/id/1031020

More vulnerabilities in coldfusion

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free