CVE-2021-21087

Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.

• CWE-79
• CWE-79

• https://helpx.adobe.com/security/products/coldfusion/apsb21-16.htmlPatch, Vendor Advisory
• https://helpx.adobe.com/security/products/coldfusion/apsb21-16.htmlPatch, Vendor Advisory

Published

Apr 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21080Adobe Connect version 11.0.7 (and earlier) is affected by a …6.1
• CVE-2021-21082Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and …7.8
• CVE-2021-21083AEM's Cloud Service offering, as well as versions 6.5.7.0 (a…7.5
• CVE-2021-21084AEM's Cloud Service offering, as well as versions 6.5.7.0 (a…6.1
• CVE-2021-21085Adobe Connect version 11.0.7 (and earlier) is affected by an…7.8
• CVE-2021-21086Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-21088Acrobat Reader DC versions versions 2020.013.20074 (and earl…7.8
• CVE-2021-21089Acrobat Reader DC versions versions 2020.013.20074 (and earl…3.3
• CVE-2021-2109Vulnerability in the Oracle WebLogic Server product of Oracl…7.2
• CVE-2021-21090Adobe InCopy version 16.0 (and earlier) is affected by an pa…8.8
• CVE-2021-21091Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…3.3
• CVE-2021-21092Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and e…7.8