Adobe ColdFusion Directory Traversal Vulnerability

cve CVE-2010-2861 4 sources, 5 claims · Watch

CISA Known Exploited Vulnerabilities writes:
Adobe ColdFusion Directory Traversal Vulnerability A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files. Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2010-2861 the claim

Severity: CRITICAL NVD
CVSS: 9.8 NVD
EPSS: 0.99747 EPSS
Exploited: yes CISA Known Exploited Vulnerabilities
Known ransomware campaign use: Known CISA Known Exploited Vulnerabilities
Due date: 2022-04-15 CISA Known Exploited Vulnerabilities
Vendor: Adobe CISA Known Exploited Vulnerabilities
n/a NVD
Product: ColdFusion CISA Known Exploited Vulnerabilities
n/a NVD
CWE: CWE-22 CISA Known Exploited Vulnerabilities
CWE-22 NVD

How far exploitation has got

No public code known
Proof of concept · Exploit-DB 2010-08-14
Proof of concept, verified · Exploit-DB 2010-08-14
A Metasploit module
Exploited in the wild · CISA Known Exploited Vulnerabilities 2022-03-25
Used in ransomware campaigns · CISA Known Exploited Vulnerabilities 2022-03-25

Timeline

2010-08-11	first spoke of it: Adobe ColdFusion Directory Traversal Vulnerability	NVD
2010-08-14	first spoke of it: Adobe ColdFusion - Directory Traversal	Exploit-DB
2022-03-25	first spoke of it: Adobe ColdFusion Directory Traversal Vulnerability	CISA Known Exploited Vulnerabilities
2022-04-15	Due date	CISA Known Exploited Vulnerabilities
2026-10-05	first spoke of it: CVE-2010-2861	EPSS

What it is to other things

affects	adobe/coldfusion NVD
made_by	adobe NVD

In words only, so not counted until a person confirms one:

made_by	`n_a` NVD says “n/a”
affects	`n_a/n_a` NVD says “n/a · n/a”

Every value, with what each source said and its receipt

Property Source Said Means here

Author

author

Exploit-DB

Metasploit

receipt

Source: Exploit-DB
Its words: Metasploit
Read by: field:author
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "Metasploit",
  "codes": "CVE-2010-2861",
  "date_added": "2011-03-16",
  "date_published": "2011-03-16",
  "date_updated": "2011-03-16",
  "description": "Adobe ColdFusion - Directory Traversal (Metasploit)",
  "file": "exploits/multiple/remote/16985.rb",
  "id": "16985",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "",
  "source_url": "",
  "tags": "Metasploit Framework (MSF)",
  "type": "remote",
  "verified": "1"
}

—

Author

author

anonymous

receipt

Source: Exploit-DB
Its words: anonymous
Read by: field:author
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "anonymous",
  "codes": "CVE-2010-2861;OSVDB-67047",
  "date_added": "2010-08-14",
  "date_published": "2010-08-14",
  "date_updated": "2017-11-03",
  "description": "Adobe ColdFusion - Directory Traversal",
  "file": "exploits/multiple/remote/14641.py",
  "id": "14641",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "http://www.exploit-db.com/screenshots/idlt15000/14641.png",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "1"
}

—

Automatable

automatable

NVD

yes

An attacker can reliably run all of the kill chain's first four steps without a person.

receipt

Source: NVD
Its words: yes
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].automatable
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	yes
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS

cvss

NVD

9.8

receipt

Source: NVD
Its words: 9.8
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseScore || field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CVSS vector

cvss_vector

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

receipt

Source: NVD
Its words: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.vectorString || field:cve.metrics.cvssMetricV31[].cvssData.vectorString
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWE

cwe

CISA Known Exploited Vulnerabilities

CWE-22

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-22
Read by: field:cwes
Said since: 2026-10-06 12:19 UTC
Last answered: 2026-10-06 16:31 UTC

2026-10-06 12:19 UTC	CWE-22
2026-09-28 11:44 UTC	—

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

CWE

cwe

NVD

CWE-22

receipt

Source: NVD
Its words: CWE-22
Read by: field:cve.weaknesses[].description[].value
Said since: 2026-10-06 12:29 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 12:29 UTC	CWE-22
2026-10-06 11:54 UTC	CWE-22, CWE-22
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

CWES

cwes

CISA Known Exploited Vulnerabilities

CWE-22

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: CWE-22
Read by: field:cwes
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Due date

due_date

CISA Known Exploited Vulnerabilities

2022-04-15

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: 2022-04-15
Read by: field:dueDate
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

EPSS

epss

EPSS

0.99747

receipt

Source: EPSS
Its words: 0.997470000
Read by: field:epss
Said since: 2026-10-06 12:18 UTC
Last answered: 2026-10-06 12:19 UTC
Original: open at the source

What the source handed over

{
  "cve": "CVE-2010-2861",
  "date": "2026-10-05",
  "epss": "0.997470000",
  "percentile": "0.999530000"
}

—

EPSS percentile

epss_percentile

EPSS

0.99953

receipt

Source: EPSS
Its words: 0.999530000
Read by: field:percentile
Said since: 2026-10-06 12:18 UTC
Last answered: 2026-10-06 12:19 UTC
Original: open at the source

What the source handed over

{
  "cve": "CVE-2010-2861",
  "date": "2026-10-05",
  "epss": "0.997470000",
  "percentile": "0.999530000"
}

—

Exploitation

exploitation

NVD

active

Reliable evidence that it is exploited in the wild.

receipt

Source: NVD
Its words: active
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].exploitation
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	active
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Exploited

exploited

CISA Known Exploited Vulnerabilities

yes

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: yes
Read by: const:yes
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Forensic triage

forensic_triage

CISA Known Exploited Vulnerabilities

false

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: No
Read by: field:forensicTriage
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Known ransomware campaign use

known_ransomware_campaign_use

CISA Known Exploited Vulnerabilities

Known

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: Known
Read by: field:knownRansomwareCampaignUse
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Platform

platform

Exploit-DB

multiple

receipt

Source: Exploit-DB
Its words: multiple
Read by: field:platform
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "anonymous",
  "codes": "CVE-2010-2861;OSVDB-67047",
  "date_added": "2010-08-14",
  "date_published": "2010-08-14",
  "date_updated": "2017-11-03",
  "description": "Adobe ColdFusion - Directory Traversal",
  "file": "exploits/multiple/remote/14641.py",
  "id": "14641",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "http://www.exploit-db.com/screenshots/idlt15000/14641.png",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "1"
}

—

Product

product

different words

CISA Known Exploited Vulnerabilities

ColdFusion

receipt

Source: CISA Known Exploited Vulnerabilities
Its words: ColdFusion
Read by: field:product
Said since: 2026-09-28 11:44 UTC
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Product

product

different words

NVD

n/a

receipt

Source: NVD
Its words: n/a
Read by: field:cve.affected[].affectedData[].product
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Severity

severity

NVD

CRITICAL

From the CVSS base score at 9.0 and above.

receipt

Source: NVD
Its words: CRITICAL
Read by: field:cve.metrics.cvssMetricV31[type=Primary].cvssData.baseSeverity || field:cve.metrics.cvssMetricV31[].cvssData.baseSeverity
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	CRITICAL
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

critical

Status

status

NVD

Analyzed

receipt

Source: NVD
Its words: Analyzed
Read by: field:cve.vulnStatus
Said since: 2026-10-02 18:03 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-02 18:03 UTC	Analyzed
2026-10-02 12:00 UTC	Modified

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Technical impact

technical_impact

NVD

partial

The attacker gains limited control, or limited information.

receipt

Source: NVD
Its words: partial
Read by: field:cve.metrics.ssvcV203[].ssvcData.options[].technicalImpact
Said since: 2026-10-06 11:54 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

2026-10-06 11:54 UTC	partial
2026-10-02 12:00 UTC	—

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Type

type

Exploit-DB

remote

receipt

Source: Exploit-DB
Its words: remote
Read by: field:type
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "anonymous",
  "codes": "CVE-2010-2861;OSVDB-67047",
  "date_added": "2010-08-14",
  "date_published": "2010-08-14",
  "date_updated": "2017-11-03",
  "description": "Adobe ColdFusion - Directory Traversal",
  "file": "exploits/multiple/remote/14641.py",
  "id": "14641",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "http://www.exploit-db.com/screenshots/idlt15000/14641.png",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "1"
}

—

Vendor

vendor

different words

CISA Known Exploited Vulnerabilities

Adobe

receipt

Source: CISA Known Exploited Vulnerabilities
Last answered: 2026-10-06 16:31 UTC

What the source handed over

{
  "cveID": "CVE-2010-2861",
  "cwes": "CWE-22",
  "dateAdded": "2022-03-25",
  "dueDate": "2022-04-15",
  "forensicTriage": "No",
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://nvd.nist.gov/vuln/detail/CVE-2010-2861",
  "product": "ColdFusion",
  "requiredAction": "Apply updates per vendor instructions.",
  "shortDescription": "A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.",
  "vendorProject": "Adobe",
  "vulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability"
}

—

Vendor

vendor

different words

NVD

n/a

receipt

Source: NVD
Its words: n/a
Read by: field:cve.affected[].affectedData[].vendor
Said since: 2026-10-02 12:00 UTC
Last answered: 2026-10-06 12:41 UTC
Original: open at the source

What the source handed over

{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "psirt@adobe.com"
      }
    ],
    "cisaActionDue": "2022-04-15",
    "cisaExploitAdd": "2022-03-25",
    "cisaRequiredAction": "Apply updates per vendor instructions.",
    "cisaVulnerabilityName": "Adobe ColdFusion Directory Traversal Vulnerability",
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "11239F7E-1C10-4F9C-BBFE-560094EA358A",
                "versionEndIncluding": "9.0.1",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/."
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades de salto de directorio en la consola del administrador en ColdFusion de  Adobe versión 9.0.1 y anteriores, permiten a los atacantes remotos leer archivos arbitrarios por medio del parámetro locale en los archivos (1) CFIDE/administrador/configuración/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm y (5) enter.cfm en CFIDE/administrador/."
      }
    ],
    "evaluatorImpact": "We have calculated the CVSS score based on information provided via the following reference links:\r\n\r\nhttp://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07.\r\nhttp://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/",
    "id": "CVE-2010-2861",
    "lastModified": "2026-10-02T14:55:20.233",
    "metrics": {
      "cvssMetricV2": [
        {
          "acInsufInfo": false,
          "baseSeverity": "HIGH",
          "cvssData": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": true,
          "obtainUserPrivilege": false,
          "source": "nvd@nist.gov",
          "type": "Primary",
          "userInteractionRequired": false
        }
      ],
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9,
          "source": "nvd@nist.gov",
          "type": "Primary"
        },
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2010-2861",
            "options": [
              {
                "exploitation": "active"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-08-14T03:55:51.874514Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2010-08-11T18:47:51.157",
    "references": [
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "psirt@adobe.com",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8137"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://securityreason.com/securityalert/8148"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Not Applicable",
          "Vendor Advisory"
        ],
        "url": "http://www.adobe.com/support/security/bulletins/apsb10-18.html"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Exploit"
        ],
        "url": "http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/"
      },
      {
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Broken Link"
        ],
        "url": "http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-07"
      },
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags": [
          "US Government Resource"
        ],
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2861"
      }
    ],
    "sourceIdentifier": "psirt@adobe.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-22"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  }
}

—

Verified

verified

Exploit-DB

true

receipt

Source: Exploit-DB
Its words: 1
Read by: field:verified
Said since: 2026-09-29 09:40 UTC
Last answered: 2026-10-06 12:11 UTC
Original: open at the source

What the source handed over

{
  "aliases": "",
  "application_url": "",
  "author": "anonymous",
  "codes": "CVE-2010-2861;OSVDB-67047",
  "date_added": "2010-08-14",
  "date_published": "2010-08-14",
  "date_updated": "2017-11-03",
  "description": "Adobe ColdFusion - Directory Traversal",
  "file": "exploits/multiple/remote/14641.py",
  "id": "14641",
  "platform": "multiple",
  "port": "",
  "screenshot_url": "http://www.exploit-db.com/screenshots/idlt15000/14641.png",
  "source_url": "",
  "tags": "",
  "type": "remote",
  "verified": "1"
}

—

Every claim, by kind

vulnerability

Adobe ColdFusion Directory Traversal Vulnerability zetlyn/cve-kev · 2022-03-25	cwe CWE-22 cwes CWE-22 due_date 2022-04-15 exploited yes forensic_triage false known_ransomware_campaign_use Known product ColdFusion vendor Adobe
Adobe ColdFusion Directory Traversal Vulnerability zetlyn/cve-nvd · 2010-08-11	automatable yes cvss 9.8 cvss_vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cwe CWE-22 exploitation active product n/a severity CRITICAL status Analyzed technical_impact partial vendor n/a	source
CVE-2010-2861 zetlyn/cve-epss · 2026-10-05	epss 0.99747 epss_percentile 0.99953	source

exploit

Adobe ColdFusion - Directory Traversal zetlyn/cve-exploitdb · 2010-08-14	author anonymous platform multiple type remote verified true	source
Adobe ColdFusion - Directory Traversal (Metasploit) zetlyn/cve-exploitdb · 2011-03-16	author Metasploit platform multiple type remote verified true	source