What’s Vulnerable › Products

Lucee vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Lucee version is affected

Latest Lucee vulnerabilities

• CVE-2026-29519 — Lucee CFML Server Reflected XSS via URL Path Parsing (CVSS 8.2)
• CVE-2023-53880 — Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin Interfaces (CVSS 4.8)
• CVE-2024-55354 — (CVSS 8.8)
• CVE-2023-38693 — RCE in Lucee REST endpoint (CVSS 9.8)
• CVE-2021-21307 — Remote Code Exploit in Lucee Admin (CVSS 9.8)