Skip to content
OpenAdvisories

Product · Adobe

ColdFusion

110 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.4
    CVE-2024-20767 Exploited Public exploit EPSS 99%

    ColdFusion | Improper Access Control (CWE-284)

    ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

    Adobe ColdFusion
    KEV Dec 16, 2024
  • High 7.5
    CVE-2023-38205 Exploited EPSS 100%

    ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

    Adobe ColdFusion
    KEV Jul 20, 2023
  • Critical 9.8
    CVE-2023-38203 Exploited · Ransomware EPSS 97%

    Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE

    Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user in…

    Adobe ColdFusion
    KEV Jan 8, 2024
  • Critical 9.8
    CVE-2023-29300 Exploited · Ransomware EPSS 100%

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir…

    Adobe ColdFusion
    KEV Jan 8, 2024
  • High 7.5
    CVE-2023-29298 Exploited EPSS 100%

    Adobe ColdFusion Improper Access Control Security feature bypass

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a…

    Adobe ColdFusion
    KEV Jul 20, 2023
  • High 8.6
    CVE-2023-26360 Exploited Public exploit EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • Critical 9.8
    CVE-2023-26359 Exploited EPSS 17%

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss…

    Adobe ColdFusion
    KEV Aug 21, 2023
  • Critical 9.8
    CVE-2018-15961 Exploited Public exploit EPSS 100%

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an un…

    Adobe ColdFusion
    KEV Nov 3, 2021