Adobe ColdFusion

Last updated on Oct 14, 2026 | Also applies to ColdFusion

Alert

Adobe security bulletins have moved to the Adobe Trust Center.

Bulletins published through September 22, 2026 will remain available in HelpX as an archive. To stay up to date on future security bulletins, bookmark this page and subscribe to our security notification service to receive the latest updates.

Questions? Contact psirt@adobe.com.

Security Updates for ColdFusion

ColdFusion

Brief	Originally posted	Last updated
APSB26-119 : Security update available for Adobe ColdFusion	09/08/2026	09/08/2026
APSB26-90 : Security update available for Adobe ColdFusion	08/11/2026	09/03/2026
APSB26-82 : Security update available for Adobe ColdFusion	07/14/2026	07/14/2026
APSB26-68 : Security update available for Adobe ColdFusion	06/30/2026	07/13/2026
APSB26-64 : Security update available for Adobe ColdFusion	06/09/2026	06/09/2026
APSB26-38 : Security update available for Adobe ColdFusion	04/14/2026	04/14/2026
APSB26-12 : Security update available for Adobe ColdFusion	01/13/2026	01/13/2026
APSB25-105 : Security update available for Adobe ColdFusion	12/09/2025	02/09/2026
APSB25-93 : Security update available for Adobe ColdFusion	09/09/2025	10/03/2025
APSB25-69 : Security update available for Adobe ColdFusion	07/08/2025	07/08/2025
APSB25-52 : Security update available for Adobe ColdFusion	05/13/2025	10/02/2025
APSB25-15 : Security update available for Adobe ColdFusion	04/8/2025	04/8/2025
APSB24-107 : Security update available for Adobe ColdFusion	12/23/2024	12/23/2024
APSB24-71 : Security update available for Adobe ColdFusion	09/10/2024	09/10/2024
APSB24-41 : Security update available for Adobe ColdFusion	06/11/2024	06/11/2024
APSB24-14 : Security update available for Adobe ColdFusion	03/12/2024	12/23/2024
APSB23-52 : Security update available for Adobe ColdFusion	11/14/2023	11/14/2023
APSB23-47 : Security update available for Adobe ColdFusion	7/19/2023	7/19/2023
APSB23-41 : Security update available for Adobe ColdFusion	07/14/2023	07/14/2023
APSB23-40 : Security update available for Adobe ColdFusion	07/11/2023	07/19/2023

APSB23-25 : Security update available for Adobe ColdFusion	03/14/2023	03/14/2023
APSB22-44: Security updates available for ColdFusion	10/11/2022	10/11/2022
APSB21-75 Security update available for Adobe ColdFusion	09/14/2021	09/14/2021

ColdFusion 2018

Brief	Originally posted	Last updated
APSB22-44: Security updates available for ColdFusion	10/11/2022	10/11/2022
APSB21-75 Security update available for Adobe ColdFusion	09/14/2021	09/14/2021
APSB21-16 Security update available for Adobe ColdFusion	03/22/2021	03/22/2021
APSB20-43 Security update available for Adobe ColdFusion	07/14/2020	07/14/2020
APSB20-18 Security update available for Adobe ColdFusion	04/14/2020	04/14/2020
APSB20-16 Security update available for Adobe ColdFusion	03/17/2020	03/17/2020
APSB19-58 Security update available for Adobe ColdFusion	12/10/2019	12/10/2019
APSB19-47 Security updates available for Adobe ColdFusion	09/24/2019	09/24/2019
APSB19-27 Security updates available for Adobe ColdFusion	06/11/2019	06/11/2019
APSB19-14 Security update available for ColdFusion	3/1/2019	3/1/2019
APSB19-10 Security update available for ColdFusion	2/12/2019	2/12/2019
APSB18-33 Security update available for ColdFusion	9/11/2018	9/28/2018

ColdFusion Builder

Brief	Originally posted	Last updated
APSB16-44 Security update available for ColdFusion Builder	12/13/2016	12/13/2016

ColdFusion 2016

Brief	Originally posted	Last updated
APSB21-16 Security update available for Adobe ColdFusion	03/22/2021	03/22/2021
APSB20-43 Security update available for Adobe ColdFusion	07/14/2020	07/14/2020
APSB20-18 Security update available for Adobe ColdFusion	04/14/2020	04/14/2020
APSB20-16 Security update available for Adobe ColdFusion	03/17/2020	03/17/2020
APSB19-47 Security updates available for Adobe ColdFusion	09/24/2019	09/24/2019
APSB19-27 Security updates available for Adobe ColdFusion	06/11/2019	06/11/2019
APSB19-10 Security update available for ColdFusion	2/12/2019	2/12/2019
APSB18-33 Security update available for ColdFusion	9/11/2018	9/28/2018
APSB18-14 Security update available for ColdFusion	4/10/2018	4/10/2018
APSB17-30 Security update available for ColdFusion	9/12/2017	9/12/2017
APSB17-14 Security update available for ColdFusion	4/25/2017	4/25/2017
APSB16-22 Security update available for ColdFusion	6/14/2016	6/14/2016
APSB16-16 Security update available for ColdFusion	5/10/2016	6/10/2016

Version 11

Brief	Originally posted	Last updated
APSB19-27 Security updates available for Adobe ColdFusion	06/11/2019	06/11/2019
APSB19-10 Security update available for ColdFusion	2/12/2019	2/12/2019
APSB18-33 Security update available for ColdFusion	9/11/2018	9/28/2018
APSB18-14 Security update available for ColdFusion	4/10/2018	4/10/2018
APSB17-30 Security update available for ColdFusion	9/12/2017	9/12/2017
APSB17-14 Security update available for ColdFusion	4/25/2017	4/25/2017
APSB16-30 Security update available for ColdFusion	8/30/2016	9/1/2016
APSB16-22 Security update available for ColdFusion	6/14/2016	6/14/2016
APSB16-16 Security update available for ColdFusion	5/10/2016	6/10/2016
APSB15-29 Security update available for ColdFusion	11/17/2015	11/17/2015
APSB15-21 Security update available for ColdFusion	8/27/2015	8/27/2015
APSB15-07 Security update available for ColdFusion	4/14/2015	4/14/2015
APSB14-29 Security update available for ColdFusion	12/9/2014	12/9/2014
APSB14-23 Security update available for ColdFusion	10/14/2014	10/14/2014

Version 10

Brief	Originally posted	Last updated
APSB17-14 Security Update: Hotfixes available for ColdFusion	4/25/2017	4/25/2017
APSB16-30 Security Update: Hotfixes available for ColdFusion	8/30/2016	9/1/2016
APSB16-22 Security Update: Hotfixes available for ColdFusion	6/14/2016	6/14/2016
APSB16-16 Security Update: Hotfixes available for ColdFusion	5/10/2016	6/10/2016
APSB15-29 Security update: hot fix available for ColdFusion	11/17/2015	11/17/2015
APSB15-21 Security update: hot fix available for ColdFusion	8/27/2015	8/27/2015
APSB15-07 Security update: hot fix available for ColdFusion	4/14/2015	4/14/2015
APSB14-29 Security update: hot fix available for ColdFusion	12/9/2014	12/9/2014
APSB14-23 Security update: hot fix available for ColdFusion	10/14/2014	10/14/2014
APSB13-27 Security update: hot fix available for ColdFusion	11/12/2013	11/12/2013
APSB13-19 Security update: hot fix available for ColdFusion	7/9/2013	7/9/2013
APSB13-13 Security update: hot fix available for ColdFusion	5/14/2013	5/14/2013
APSA13-03 Security advisory for ColdFusion	5/8/2013	5/14/2013
APSB13-10 Security update: hot fix available for ColdFusion	4/9/2013	4/18/2013
APSB13-03 Security update: hot fix available for ColdFusion	1/15/2013	3/14/2013
APSA13-01 Security advisory for ColdFusion	1/4/2013	1/16/2013
APSB12-26 Security update: hot fix available for ColdFusion	12/11/2012	12/11/2012
APSB12-25 Security update: hot fix available for ColdFusion	11/19/2012	11/19/2012
APSB12-21 Security update: hot fix available for ColdFusion	9/11/2012	9/11/2012

Version 9

Brief	Originally posted	Last updated
APSB14-23 Security update: hot fixes available for ColdFusion	10/14/2014	10/14/2014
APSB13-27 Security update: hot fixes available for ColdFusion	11/12/2013	11/12/2013
APSB13-19 Security update: hot fixes available for ColdFusion	7/9/2013	7/9/2013
APSB13-13 Security update: hot fixes available for ColdFusion	5/14/2013	5/14/2013
APSA13-03 Security advisory for ColdFusion	5/8/2013	5/14/2013
APSB13-10 Security update: hot fixes available for ColdFusion	4/9/2013	4/18/2013
APSB13-03 Security update: hot fixes available for ColdFusion	1/15/2013	3/14/2013
APSA13-01 Security advisory for ColdFusion	1/4/2013	1/16/2013
APSB12-26 Security update: hot fixes available for ColdFusion	12/11/2012	12/11/2012
APSB12-21 Security update: hot fixes available for ColdFusion	9/11/2012	9/11/2012
APSB12-15 Security update: hot fixes available for ColdFusion	6/12/2012	6/12/2012
APSB12-06 Security update: hot fixes available for ColdFusion	3/13/2012	3/13/2012
APSB11-29 Security update: hot fixes available for ColdFusion	12/13/2011	4/16/2013
APSB11-14 Security update: hot fixes available for ColdFusion	6/14/2011	6/14/2011
APSB11-04 Security update: hot fixes available for ColdFusion	2/8/2011	3/7/2011
APSB10-18 Security update: hot fixes available for ColdFusion	8/10/2010	8/11/2010
APSB10-11 Security update: hot fixes available for ColdFusion	5/11/2010	5/11/2010
APSB10-05 Security update available for BlazeDS	2/11/2010	3/5/2010
APSB10-04 Solution available for potential ColdFusion information disclosure issue	1/29/2010	1/29/2010

Version 8

Brief	Originally posted	Last updated
APSB12-21 Security update: hot fix available for ColdFusion 10 and earlier	9/11/2012	9/11/2012
APSB12-15 Security update: hot fix available for ColdFusion 9.0.1 and earlier	6/12/2012	6/12/2012
APSB12-06 Security update: hot fix available for ColdFusion	3/13/2012	3/13/2012
APSB11-14 Security update: hot fix available for ColdFusion	6/14/2011	6/14/2011
APSB11-04 Security update: hot fix available for ColdFusion	2/8/2011	3/7/2011
APSB10-18 Security update: hot fix available for ColdFusion	8/10/2010	8/11/2010
APSB10-11 Security update: hot fixes available for ColdFusion	5/11/2010	5/11/2010
APSB10-05 Security update available for BlazeDS	2/11/2010	3/5/2010
APSB09-12 Security Update: hot fixes available for ColdFusion and JRun	8/17/2009	10/5/2009
APSB09-09 hot fix available for potential ColdFusion 8 input sanitization issue	7/8/2009	8/19/2009
APSB08-21 Update available for potential ColdFusion 8 privilege escalation issue	11/05/2008	11/05/2008
APSB08-12 Update available for ColdFusion 8 CFC method access level issue	04/08/2008	04/08/2008
APSB08-06 Update available for potential ColdFusion MX 7 and ColdFusion 8 Cross Site Scripting security issue	03/11/2008	03/11/2008
APSB08-07 Update available for ColdFusion MX 7 and ColdFusion 8 Cross-Site Scripting issue	03/11/2008	03/11/2008
APSB08-08 Update available for ColdFusion MX 7 and ColdFusion 8 logs invalid admin interface log-in attempts	03/11/2008	03/11/2008
APSB07-19 Update available for ColdFusion MX 7 and ColdFusion 8 potential session hijacking issue	11/13/2007	11/13/2007

Version MX 7

Brief	Originally posted	Last updated
APSB08-21 Update available for potential ColdFusion 8 privilege escalation issue	11/05/2008	11/05/2008
APSB08-06 Update available for potential ColdFusion MX 7 and ColdFusion 8 Cross Site Scripting security issue	03/11/2008	03/11/2008
APSB08-07 Update available for ColdFusion MX 7 and ColdFusion 8 Cross-Site Scripting issue	03/11/2008	03/11/2008
APSB08-08 Update available for ColdFusion MX 7 and ColdFusion 8 logs invalid admin interface log-in attempts	03/11/2008	03/11/2008
APSB07-19 Update available for ColdFusion MX 7 and ColdFusion 8 potential session hijacking issue	11/13/2007	11/13/2007
APSB07-08 Workaround available for Linux and Solaris ColdFusion MX 7 file permissions vulnerability	04/10/2007	04/10/2007
APSB07-06 Patch available for ColdFusion MX 7 cross-site scripting protection bypass	03/13/2007	03/13/2007
APSB07-05 Patch available for JRun cross-site scripting issue	02/13/2007	02/13/2007
APSB07-04 Patch available for ColdFusion MX cross-site scripting issue	02/13/2007	02/13/2007
APSB07-03 Patch available for ColdFusion MX 7 cross-site scripting issue when Global Script Protection is not enabled	02/13/2007	02/13/2007
APSB07-02 Patch available for ColdFusion MX 7 and JRun 4 information disclosure issue	01/09/2007	01/09/2007
APSB06-17 Local privilege escalation in a ColdFusion third-party library	10/10/2006	10/10/2006
APSB06-12 Denial of service in ColdFusion Flash Remoting Gateway	09/12/2006	09/12/2006
APSB06-13 ColdFusion sandbox security vulnerability	09/12/2006	09/12/2006
APSB06-14 ColdFusion cross-site scripting in error page	09/12/2006	09/12/2006
APSB06-10 ColdFusion AdminAPI Authentication Issue	08/08/2006	08/08/2006

Version MX 6.1

Brief	Originally posted	Last updated
APSB07-05 Patch available for JRun cross-site scripting issue	02/13/2007	02/13/2007
APSB07-04 Patch available for ColdFusion MX cross-site scripting issue	02/13/2007	02/13/2007
APSB06-14 ColdFusion cross-site scripting in error page	09/12/2006	09/12/2006

Version MX 6

Brief	Originally posted	Last updated
APSB07-05 Patch available for JRun cross-site scripting issue	02/13/2007	02/13/2007
APSB07-04 Patch available for ColdFusion MX cross-site scripting issue	02/13/2007	02/13/2007
APSB06-14 ColdFusion cross-site scripting in error page	09/12/2006	09/12/2006

Get help faster and easier

New user?