Adobe

Coldfusion

226 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-44355

  • EPSS 47.17%
  • Veröffentlicht 17.11.2023 14:15:22
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impac...

9.8

CVE-2023-44350

  • EPSS 64.56%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:43

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

9.8

CVE-2023-44351

  • EPSS 50.16%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

6.1

CVE-2023-44352

  • EPSS 84.81%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, m...

9.8

CVE-2023-44353

  • EPSS 80.18%
  • Veröffentlicht 17.11.2023 14:15:21
  • Zuletzt bearbeitet 21.11.2024 08:25:44

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

7.5

CVE-2023-26347

  • EPSS 10.07%
  • Veröffentlicht 17.11.2023 14:15:20
  • Zuletzt bearbeitet 21.11.2024 07:51:10

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access ...

9.8

CVE-2023-38204

  • EPSS 65.49%
  • Veröffentlicht 14.09.2023 08:15:07
  • Zuletzt bearbeitet 21.11.2024 08:13:04

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir...

7.5

CVE-2023-38205

Warnung
  • EPSS 99.73%
  • Veröffentlicht 14.09.2023 08:15:07
  • Zuletzt bearbeitet 23.10.2025 11:13:19

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a...

5.3

CVE-2023-38206

  • EPSS 0.64%
  • Veröffentlicht 14.09.2023 08:15:07
  • Zuletzt bearbeitet 21.11.2024 08:13:05

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a...

7.4

CVE-2021-40698

  • EPSS 0.54%
  • Veröffentlicht 07.09.2023 13:15:07
  • Zuletzt bearbeitet 21.11.2024 06:24:35

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulner...