Adobe.ColdFusion.CVE-2025-49541.XSS

Description

This indicates an attack attempt against a Cross Site Scripting vulnerability in Adobe ColdFusion.
The vulnerability is due to insufficient validation of user-supplied inputs. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in the execution of arbitrary script code in the victim's browser.

Affected Products

Adobe ColdFusion 2025 Update 2
Adobe ColdFusion 2023 Update 14 and earlier versions
Adobe ColdFusion 2021 Update 20 and earlier versions

Impact

System Compromise: Remote attackers can execute arbitrary script code within the context of the target user's browser.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://helpx.adobe.com/security/products/acrobat/apsb25-69.html

References