← CVE Tracker
9.8CRITICALCISA KEV — actively exploited

CVE-2010-2861 — Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and…

Adobe · Coldfusion · Published 11 Aug 2010 · Modified 2 Oct 2026

Description

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.

References

What to do
  1. Check whether Coldfusion is in your asset inventory.
  2. Exploitation confirmed — patch within 72 hours.
  3. Record the decision in your risk register for audit evidence.
Alert me on similar CVEs →
Share

Link: adminadda.com/cve/CVE-2010-2861