CVE-2022-38419

🗓️ 14 Oct 2022 19:42:56Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 65 Views

Adobe ColdFusion XXE vulnerability allows arbitrary file system rea

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the ColdFusion software platform allows attackers to gain unauthorized access to protected information.	15 Mar 202300:00	–	bdu_fstec
CNNVD	Adobe ColdFusion 代码问题漏洞	12 Oct 202200:00	–	cnnvd
CNVD	Adobe ColdFusion XML External Entity Injection Vulnerability	14 Oct 202200:00	–	cnvd
Tenable Nessus	Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)	13 Oct 202200:00	–	nessus
Check Point Advisories	Adobe ColdFusion Credentials Disclosure (APSB22-44: CVE-2022-38419)	13 Oct 202200:00	–	checkpoint_advisories
Cvelist	CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read	14 Oct 202219:42	–	cvelist
EUVD	EUVD-2022-41004	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Adobe products	12 Oct 202200:00	–	ncsc
NVD	CVE-2022-38419	14 Oct 202220:15	–	nvd
OSV	CVE-2022-38419	14 Oct 202220:15	–	osv

NVD

Node

adobe coldfusionMatch2018-

adobe coldfusionMatch2018update1

adobe coldfusionMatch2018update10

adobe coldfusionMatch2018update11

adobe coldfusionMatch2018update12

adobe coldfusionMatch2018update13

adobe coldfusionMatch2018update14

adobe coldfusionMatch2018update2

adobe coldfusionMatch2018update3

adobe coldfusionMatch2018update4

adobe coldfusionMatch2018update5

adobe coldfusionMatch2018update6

adobe coldfusionMatch2018update7

adobe coldfusionMatch2018update8

adobe coldfusionMatch2018update9

adobe coldfusionMatch2021-

adobe coldfusionMatch2021update1

adobe coldfusionMatch2021update2

adobe coldfusionMatch2021update3

adobe coldfusionMatch2021update4

[
  {
    "vendor": "Adobe",
    "product": "ColdFusion",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "CF2021U4",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "CF2018u14",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "None",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]