CVE-2004-2331

ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag.

• CWE-470

• http://secunia.com/advisories/10743/URL Repurposed
• http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/9521Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14984Third Party Advisory, VDB Entry
• http://secunia.com/advisories/10743/URL Repurposed
• http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/9521Broken Link, Patch, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14984Third Party Advisory, VDB Entry

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2325Cross-site scripting (XSS) vulnerability in EditModule.aspx …
• CVE-2004-2326SQL injection vulnerability in IP3 Networks NetAccess Applia…
• CVE-2004-2327Vizer Web Server 1.9.1 allows remote attackers to cause a de…
• CVE-2004-2328Clearswift MAILsweeper for SMTP before 4.3_13 allows remote …
• CVE-2004-2329Kerio Personal Firewall (KPF) 2.1.5 allows local users to ex…
• CVE-2004-2330ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to ca…
• CVE-2004-2332Multiple cross-site scripting (XSS) vulnerabilities in CPAN …
• CVE-2004-2333Bodington 2.1.0 RC1 and earlier does not secure the file upl…
• CVE-2004-2334Multiple cross-site scripting (XSS) vulnerabilities in EMU W…
• CVE-2004-2335The Macromedia installers and e-licensing client on Mac OS X…
• CVE-2004-2336Unknown vulnerability in Novell GroupWise and GroupWise WebA…
• CVE-2004-2337The /.inlook/.crypt file for inlook 0.7.3 and earlier is ins…