Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Adobe ColdFusion — helpx.adobe.com/security/products/coldfusion/apsb23-40.html Clear all filters
TI-2023-13696 CVE-2023-29300 · GHSA-4c7h-552f-7g3h

Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

Priority CRITICAL 100KEV

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99991 Published 2023-07-12 No fix listed CWE-502
TI-2023-13697 CVE-2023-29301 · GHSA-wq58-62g3-92fc

Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass

Priority MEDIUM 64

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Se…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.34713 Published 2023-07-12 No fix listed CWE-307
TI-2023-13694 CVE-2023-29298 · GHSA-9fcc-rhq3-fh3c

Adobe ColdFusion Improper Access Control Security feature bypass

Priority CRITICAL 90KEV

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.9979 Published 2023-07-12 No fix listed CWE-284