CVE-2025-30293

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access. Exploitation of this issue does not require user interaction and scope is changed.

• CWE-20

• https://helpx.adobe.com/security/products/coldfusion/apsb25-15.htmlVendor Advisory

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30288ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…8.2
• CVE-2025-30289ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…8.2
• CVE-2025-3029A crafted URL containing specific Unicode characters could h…7.3
• CVE-2025-30290ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…8.7
• CVE-2025-30291ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…5.5
• CVE-2025-30292ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…6.1
• CVE-2025-30294ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are…6.8
• CVE-2025-30295Adobe Framemaker versions 2020.8, 2022.6 and earlier are aff…7.8
• CVE-2025-30296Adobe Framemaker versions 2020.8, 2022.6 and earlier are aff…7.8
• CVE-2025-30297Adobe Framemaker versions 2020.8, 2022.6 and earlier are aff…7.8
• CVE-2025-30298Adobe Framemaker versions 2020.8, 2022.6 and earlier are aff…7.8
• CVE-2025-30299Adobe Framemaker versions 2020.8, 2022.6 and earlier are aff…7.8