7.5

CVE-2022-38420

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version2018 Update-
Adobe ≫ Coldfusion Version2018 Updateupdate1
Adobe ≫ Coldfusion Version2018 Updateupdate10
Adobe ≫ Coldfusion Version2018 Updateupdate11
Adobe ≫ Coldfusion Version2018 Updateupdate12
Adobe ≫ Coldfusion Version2018 Updateupdate13
Adobe ≫ Coldfusion Version2018 Updateupdate14
Adobe ≫ Coldfusion Version2018 Updateupdate2
Adobe ≫ Coldfusion Version2018 Updateupdate3
Adobe ≫ Coldfusion Version2018 Updateupdate4
Adobe ≫ Coldfusion Version2018 Updateupdate5
Adobe ≫ Coldfusion Version2018 Updateupdate6
Adobe ≫ Coldfusion Version2018 Updateupdate7
Adobe ≫ Coldfusion Version2018 Updateupdate8
Adobe ≫ Coldfusion Version2018 Updateupdate9
Adobe ≫ Coldfusion Version2021 Update-
Adobe ≫ Coldfusion Version2021 Updateupdate1
Adobe ≫ Coldfusion Version2021 Updateupdate2
Adobe ≫ Coldfusion Version2021 Updateupdate3
Adobe ≫ Coldfusion Version2021 Updateupdate4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.96% 0.758
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@adobe.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.