CVE-2012-5674: Adobe ColdFusion

High severity, CVSS 7.1. EPSS: 4.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, allows attackers to cause a denial of service via unknown vectors.

Affected products

• Adobe ColdFusion: version 10.0 only

Published 2012-11-20. Last modified 2026-06-16.