CVE-2004-1815: Macromedia ColdFusion

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).

Affected products

• Macromedia ColdFusion: version 6.0 only; version 6.1 only
• Macromedia Jrun: version 4.0 only; version 4.0_build_61650 only
• Sun One Application Server: version 7.0 only

Published 2004-03-15. Last modified 2026-06-16.