AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-40699

HIGH · CVSS 7.4 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-09-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-40699
Severity
HIGH
CVSS
7.4
EPSS
0.49%

Original NVD Description

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.