lucee vulnerabilities

5 published CVEs name lucee among the affected products.

Critical 1High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-29519
Lucee CFML Server Reflected XSS via URL Path Parsing
lucee · Lucee
Medium6.2
CVE-2023-53880
Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin Interfaces
Lucee · Lucee
Medium4.8
CVE-2024-55354
Lucee before 5.4.7.3 LTS and 6 before 6.1.1.118, when an attacker can place files on the server, is vulnerable to a protection mechanism failure that can let…
Lucee · Lucee Server
High8.8
CVE-2023-38693
RCE in Lucee REST endpoint
lucee · Lucee
Critical9.8
CVE-2021-21307
Remote Code Exploit in Lucee Admin
lucee · Lucee
High8.6