ColdFusion

4 results · Clear filters · Feed

• High 7.4
  CVE-2024-20767 Exploited Public exploit Scanner template EPSS 99%

  ColdFusion | Improper Access Control (CWE-284)

  ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this …

  Adobe ColdFusion
  Mar 18, 2024

  KEV Dec 16, 2024
• High 7.5
  CVE-2023-38205 Exploited Scanner template EPSS 100%

  ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

  Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

  Adobe ColdFusion
  Sep 14, 2023

  KEV Jul 20, 2023
• High 7.5
  CVE-2023-29298 Exploited Scanner template EPSS 100%

  Adobe ColdFusion Improper Access Control Security feature bypass

  Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a…

  Adobe ColdFusion
  Jul 12, 2023

  KEV Jul 20, 2023
• High 8.6
  CVE-2023-26360 Exploited Public exploit Scanner template EPSS 97%

  Adobe ColdFusion Improper Access Control Arbitrary code execution

  Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

  Adobe ColdFusion
  Mar 23, 2023

  KEV Mar 15, 2023