CVE-2025-64898 describes an Insufficiently Protected Credentials vulnerability in Adobe ColdFusion affecting versions 2025.4, 2023.16, 2021.22 and earlier. The vulnerability could allow an attacker to exploit improperly stored or transmitted credentials to gain limited unauthorized write access. Exploitation does not require user interaction, and the attack vector is network-based with low attack complexity and no privileges required. The vulnerability impacts integrity but not confidentiality or availability.

The vulnerability allows limited unauthorized write access due to insufficient protection of credentials. This could enable an attacker to modify data or configurations within the affected ColdFusion environment. There is no impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor Adobe advisories for updates and apply patches once available.