CVE-2010-0185: Adobe ColdFusion

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL.

Affected products

• Adobe ColdFusion: version 9.0 only

Published 2010-02-03. Last modified 2026-06-16.