CVE-2021-21087 Scanner
CVE-2021-21087 scanner - Cross-Site Scripting (XSS) vulnerability in Adobe ColdFusion
Used 3.4k times · 3.4k assets checked · url
CVE
CVE-2021-21087
5.4
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.
Description
Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction.
Attack Vector
Network
Privileges Req.
Low
User Interaction
Required
coldfusion
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: coldfusion
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →