CVE-2005-4345: Macromedia ColdFusion

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges.

Affected products

• Macromedia ColdFusion: version 7.0 only

Published 2005-12-19. Last modified 2026-06-16.