Lucee vulnerabilities

1 known vulnerability in Lucee from Lucee Association Switzerland. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  Lucee: Improper Control of Generation of Code

  CVE-2025-34074Jul 2, 2025Lucee Association SwitzerlandEPSS 2.2%

  An authenticated remote code execution vulnerability exists in Lucee’s administrative interface due to insecure design in the scheduled task functionality. An administrator with access to /lucee/admin/web.cfm can configure a scheduled job to retrieve a remote