we are updated with latest path of coldfusion 2021 standard edition and wanted to know if these vulnerabilities have been fixed by adobe i am doing a check online but could not find any update, we are using IIS with coldfusion so if its tomcat, i am sure its talking about inbuild

Without an actual CVE number I'm not sure (I do recognize a couple of those). I believe there's a sec update coming w/ a new version of kittyserver but I'm not certain on timeline. I also know some of those are fairly niche vulns. Like one of them required you to be behind a certain proxy server on IPV6 or something like that.