Skip to main content
HIGH

CVE-2025-43565

CVSS v3

8.4

HIGH

EPSS Score

15.7 %

exploit probability, as of 2026-10-05

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed.

Technical details

Published
2025-05-13
Last Modified
2025-05-19

Frequently asked questions

What is CVE-2025-43565?

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed.

Is CVE-2025-43565 actively exploited?

Active exploitation of CVE-2025-43565 has not been confirmed. Its EPSS score was 15.7% on 2026-10-05, the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2025-43565?

CVE-2025-43565 has a CVSS v3 base score of 8.4 (HIGH severity).

Is CVE-2025-43565 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEsSIEM & TIP integrations

No credit card required · 50 free checks/month · Free API key

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database