Skip to content
OpenAdvisories

Product · Adobe

ColdFusion

110 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38203 Exploited · Ransomware Scanner template EPSS 97%

    Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE

    Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user in…

    Adobe ColdFusion
    KEV Jan 8, 2024
  • Critical 9.8
    CVE-2023-29300 Exploited · Ransomware Scanner template EPSS 100%

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir…

    Adobe ColdFusion
    KEV Jan 8, 2024
  • Critical 9.8
    CVE-2023-26359 Exploited EPSS 17%

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss…

    Adobe ColdFusion
    KEV Aug 21, 2023
  • Critical 9.8
    CVE-2018-15961 Exploited Public exploit Scanner template EPSS 100%

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an un…

    Adobe ColdFusion
    KEV Nov 3, 2021