vulnerability
APSB16-22: Security updates available for ColdFusion (CVE-2016-4159)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Jun 16, 2016 | Jun 21, 2019 | Aug 11, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jun 16, 2016
Added
Jun 21, 2019
Modified
Aug 11, 2025
Description
Adobe has released security hotfixes for ColdFusion versions 10, 11 and the 2016 release. These hotfixes resolve an input validation issue that could be used in reflected XSS (cross-site scripting) attacks (CVE-2016-4159).
Solutions
adobe-coldfusion-10-update-20adobe-coldfusion-11-update-9adobe-coldfusion-2016-release-update-2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.