Adobe

Coldfusion

208 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-34112

  • EPSS 11.22%
  • Veröffentlicht 13.06.2024 12:15:10
  • Zuletzt bearbeitet 03.12.2024 14:35:08

ColdFusion versions 2023u7, 2021u13 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could exploit this vulnerability to gain unauthorized access to sensitive files or d...

7.4

CVE-2024-20767

Warnung
  • EPSS 94.04%
  • Veröffentlicht 18.03.2024 12:15:06
  • Zuletzt bearbeitet 23.10.2025 11:13:22

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation...

4.3

CVE-2023-44355

  • EPSS 1.32%
  • Veröffentlicht 17.11.2023 14:15:22
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impac...

9.8

CVE-2023-44350

  • EPSS 61.89%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:43

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

9.8

CVE-2023-44351

  • EPSS 32.01%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

6.1

CVE-2023-44352

  • EPSS 80.13%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, m...

9.8

CVE-2023-44353

  • EPSS 89.44%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

7.5

CVE-2023-26347

  • EPSS 83.17%
  • Veröffentlicht 17.11.2023 14:15:20
  • Zuletzt bearbeitet 21.11.2024 07:51:10

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access ...

9.8

CVE-2023-38204

  • EPSS 74.66%
  • Veröffentlicht 14.09.2023 08:15:07
  • Zuletzt bearbeitet 21.11.2024 08:13:04

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir...

7.5

CVE-2023-38205

Warnung
  • EPSS 94.18%
  • Veröffentlicht 14.09.2023 08:15:07
  • Zuletzt bearbeitet 23.10.2025 11:13:19

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a...