Adobe ColdFusion Uncontrolled Resource Consumption Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe ColdFusion versions 2023.18, 2025.6 and earlier. This vulnerability allows a high-privileged attacker to exhaust system resources, causing a slowdown in application performance. The issue arises from uncontrolled resource consumption, and exploitation does not require user interaction.

Impact

Exploitation of this vulnerability can lead to application denial-of-service, causing a significant reduction in application speed and performance.

Remediation

Users are advised to update to ColdFusion 2025 Update 7 or ColdFusion 2023 Update 19. For more information, refer to the Adobe ColdFusion downloads page or the respective ColdFusion 2025 and 2023 Lockdown Guides.