Is CVE-2001-1514 actively exploited?

No active exploitation of CVE-2001-1514 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2001-1514 be exploited remotely?

Yes. CVE-2001-1514 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2001-1514?

CVE-2001-1514 has a CVSS score of 10.0 (CRITICAL).

HOME VULNERABILITIESCVE-2001-1514

CRITICAL

CVE-2001-1514

NVD-CWE-OtherPublished: December 31, 2001· Updated: Jun 16, 2026

10.0

CVSS v3.1

Official Description

ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account.

NVD Source

Technical Analysis

CVE-2001-1514 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.