Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Adobe ColdFusion — helpx.adobe.com/security/products/coldfusion/apsb23-47.html Clear all filters
TI-2023-19616 CVE-2023-38204 · GHSA-77p2-6w3v-xjv8

Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8

Priority CRITICAL 86

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.6966 Published 2023-09-14 No fix listed CWE-502
TI-2023-19617 CVE-2023-38205 · GHSA-76wh-rggp-rxxq

ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

Priority CRITICAL 90KEV

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99804 Published 2023-09-14 No fix listed CWE-284
TI-2023-19618 CVE-2023-38206 · GHSA-m7q8-m2mr-jg5g

ColdFusion | Improper Access Control (CWE-284)

Priority LOW 31

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0078 Published 2023-09-14 No fix listed CWE-284