Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
adobeAdobeAPSB23-25
HistoryMar 14, 2023 - 12:00 a.m.

APSB23-25 : Security update available for Adobe ColdFusion

2023-03-1400:00:00
helpx.adobe.com
29

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.963 High

EPSS

Percentile

99.5%

JSON

Adobe has released security updates for ColdFusion versions 2021 and 2018. These updates resolve critical and important vulnerabilities that could lead to arbitrary code execution and memory leak.

Related

nessus 1
attackerkb 3
rapid7blog 3
malwarebytes 3
thn 3
cve 3
prion 3
ics 1
hackerone 1
cisa_kev 2
hivepro 1
zdt 2
metasploit 2
githubexploit 1
cnvd 1
zdi 1
nuclei 1
exploitdb 1
impervablog 1
packetstorm 2
talosblog 1
qualysblog 1
nessus
nessus
Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)
2023-03-16 00:00:00
attackerkb
attackerkb
CVE-2023-26359
2023-03-14 00:00:00
CVE-2023-26360
2023-04-14 00:00:00
CVE-2023-29298
2023-07-12 00:00:00
rapid7blog
rapid7blog
Rapid7 Observed Exploitation of Adobe ColdFusion
2023-03-21 15:10:50
CVE-2023-29298: Adobe ColdFusion Access Control Bypass
2023-07-11 15:30:00
Metasploit Weekly Wrap-Up
2023-05-05 18:48:25
malwarebytes
malwarebytes
Adobe ColdFusion vulnerability exploited in the wild
2023-08-23 12:30:00
Adobe Coldfusion vulnerability used in attacks on government servers
2023-12-06 14:15:54
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
thn
thn
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
2023-08-22 03:36:00
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
2023-12-06 10:10:00
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
2023-03-16 04:47:00
cve
cve
CVE-2023-26361
2023-03-23 20:15:15
CVE-2023-26359
2023-03-23 20:15:15
CVE-2023-26360
2023-03-23 20:15:15
prion
prion
Path traversal
2023-03-23 20:15:00
Deserialization of untrusted data
2023-03-23 20:15:00
Improper access control
2023-03-23 20:15:00
ics
ics
Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers
2023-12-05 12:00:00
hackerone
hackerone
U.S. Dept Of Defense: Unauthenticated File Read Adobe ColdFusion
2023-11-11 17:02:47
cisa_kev
cisa_kev
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
2023-08-21 00:00:00
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
2023-03-15 00:00:00
hivepro
hivepro
Adobe ColdFusion Vulnerability Leads to Federal Agency Breach
2023-12-07 05:51:09
zdt
zdt
Adobe ColdFusion Unauthenticated Remote Code Execution Exploit
2023-05-02 00:00:00
Adobe ColdFusion v 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read Exploit
2024-03-11 00:00:00
metasploit
metasploit
Adobe ColdFusion Unauthenticated Arbitrary File Read
2023-04-14 14:52:13
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-04-14 14:52:13
githubexploit
githubexploit
Exploit for Improper Access Control in Adobe Coldfusion
2023-12-26 06:26:01
cnvd
cnvd
Adobe ColdFusion Path Traversal Vulnerability (CNVD-2023-100303)
2023-03-17 00:00:00
zdi
zdi
Adobe ColdFusion copydirectory Directory Traversal Information Disclosure Vulnerability
2023-08-14 00:00:00
nuclei
nuclei
Unauthenticated File Read Adobe ColdFusion
2023-05-09 09:33:18
exploitdb
exploitdb
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read
2024-03-11 00:00:00
impervablog
impervablog
CVE-2023-26360 – Adobe ColdFusion Arbitrary Code Execution
2023-04-04 10:04:27
packetstorm
packetstorm
Adobe ColdFusion 2018,15 / 2021,5 Arbitrary File Read
2024-03-11 00:00:00
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-05-01 00:00:00
talosblog
talosblog
A personal Year in Review to round out 2023
2023-12-14 19:00:09
qualysblog
qualysblog
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.963 High

EPSS

Percentile

99.5%

JSON
Related for APSB23-25
nessus1attackerkb3rapid7blog3malwarebytes3thn3cve3prion3ics1hackerone1cisa_kev2hivepro1zdt2metasploit2githubexploit1cnvd1zdi1nuclei1exploitdb1impervablog1packetstorm2talosblog1qualysblog1