9.8

CVE-2022-35690

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version2018 Update-
Adobe ≫ Coldfusion Version2018 Updateupdate1
Adobe ≫ Coldfusion Version2018 Updateupdate10
Adobe ≫ Coldfusion Version2018 Updateupdate11
Adobe ≫ Coldfusion Version2018 Updateupdate12
Adobe ≫ Coldfusion Version2018 Updateupdate13
Adobe ≫ Coldfusion Version2018 Updateupdate14
Adobe ≫ Coldfusion Version2018 Updateupdate2
Adobe ≫ Coldfusion Version2018 Updateupdate3
Adobe ≫ Coldfusion Version2018 Updateupdate4
Adobe ≫ Coldfusion Version2018 Updateupdate5
Adobe ≫ Coldfusion Version2018 Updateupdate6
Adobe ≫ Coldfusion Version2018 Updateupdate7
Adobe ≫ Coldfusion Version2018 Updateupdate8
Adobe ≫ Coldfusion Version2018 Updateupdate9
Adobe ≫ Coldfusion Version2021 Update-
Adobe ≫ Coldfusion Version2021 Updateupdate1
Adobe ≫ Coldfusion Version2021 Updateupdate2
Adobe ≫ Coldfusion Version2021 Updateupdate3
Adobe ≫ Coldfusion Version2021 Updateupdate4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.88% 0.945
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@adobe.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.