Skip to content
OpenAdvisories
High · 7.5 CVE-2022-38420 EUVD-2022-41005GHSA-gmgx-cj5g-7v52

Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service

Published Oct 14, 2022 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction.

Affected products

VendorProductAffectedFixed
Adobe ColdFusion unspecified – ≤ CF2021U4, unspecified – ≤ CF2018u14, unspecified – ≤ None —

References