CVE-2006-3978: Adobe ColdFusion

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products, allows local users to execute arbitrary code via unknown attack vectors.

Affected products

• Adobe ColdFusion: version 7.0 only; version 7.0.1 only; version 7.0.2 only

Published 2006-10-10. Last modified 2026-06-16.