CVSS: 8.2EPSS: 94%CPEs: 1EXPL: 5CVE-2024-20767 – Adobe ColdFusion Improper Access Control Vulnerability
https://notcve.org/view.php?id=CVE-2024-20767
18 Mar 2024 — ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary file system write. Exploitation of this issue does not require user interaction. Las versiones 2023.6, 2021.12 y anteriores de ColdFusion se ven afectadas por una vulnerabilidad de control de acceso inadecuado que po... • https://packetstorm.news/files/id/180607 • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 32%CPEs: 19EXPL: 0CVE-2023-44351 – Adobe ColdFusion RCE Security Vulnerability
https://notcve.org/view.php?id=CVE-2023-44351
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de deserialización de datos no confiables que podría provocar la ejecución de código arbitrario. La explotación de este problema no requiere l... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-502: Deserialization of Untrusted Data •
CVSS: 5.0EPSS: 1%CPEs: 19EXPL: 0CVE-2023-44355 – ColdFusion | Improper Input Validation (CWE-20)
https://notcve.org/view.php?id=CVE-2023-44355
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this issue does require user interaction. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de validación de entrada incorrecta que podría provoca... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 88%CPEs: 19EXPL: 0CVE-2023-26347 – CVE-2023-38205 issues | ColdFusion Admin Panel Access
https://notcve.org/view.php?id=CVE-2023-26347
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de control de acceso inadecuado que p... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-284: Improper Access Control •
CVSS: 6.4EPSS: 86%CPEs: 19EXPL: 0CVE-2023-44352 – Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version
https://notcve.org/view.php?id=CVE-2023-44352
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS) Reflejada. Si un atacan... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 92%CPEs: 19EXPL: 0CVE-2023-44353 – ColdFusion WDDX Deserialization Gadgets
https://notcve.org/view.php?id=CVE-2023-44353
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de deserialización de datos no confiables que podría provocar la ejecución de código arbitrario. La explotación de este problema no requiere l... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-502: Deserialization of Untrusted Data •
CVSS: 10.0EPSS: 61%CPEs: 19EXPL: 0CVE-2023-44350 – ColdFusion | Deserialization of Untrusted Data (CWE-502)
https://notcve.org/view.php?id=CVE-2023-44350
17 Nov 2023 — Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Las versiones 2023.5 (y anteriores) y 2021.11 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de deserialización de datos no confiables que podría provocar la ejecución de código arbitrario. La explotación de este problema no requiere l... • https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html • CWE-502: Deserialization of Untrusted Data •
CVSS: 10.0EPSS: 75%CPEs: 30EXPL: 0CVE-2023-38204 – Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
https://notcve.org/view.php?id=CVE-2023-38204
14 Sep 2023 — Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction. Las versiones 2018u18 (y anteriores), 2021u8 (y anteriores) y 2023u2 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de Deserialización de Datos No Confiables que podría resultar en la Ejecución de Código Arbitrario... • https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html • CWE-502: Deserialization of Untrusted Data •
CVSS: 7.8EPSS: 94%CPEs: 30EXPL: 0CVE-2023-38205 – Adobe ColdFusion Improper Access Control Vulnerability
https://notcve.org/view.php?id=CVE-2023-38205
14 Sep 2023 — Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction. Las versiones 2018u18 (y anteriores), 2021u8 (y anteriores) y 2023u2 (y anteriores) de Adobe ColdFusion se ven afectadas por una vulnerabilidad de Contr... • https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html • CWE-284: Improper Access Control •
CVSS: 5.3EPSS: 0%CPEs: 30EXPL: 0CVE-2023-38206 – ColdFusion | Improper Access Control (CWE-284)
https://notcve.org/view.php?id=CVE-2023-38206
14 Sep 2023 — Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction. Las versiones 2018u18 (y anteriores), 2021u8 (y anteriores) y 2023u2 (y anteriores) de Adobe ColdFusion se ven... • https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html • CWE-284: Improper Access Control •