CVE-2023-38203

🗓️ 20 Jul 2023 15:41:10Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 314 Views

Adobe ColdFusion 2018u17, 2021u7, 2023u1 Deserialization of Untrusted Data vulnerabilit

Reporter	Title	Published	Views	Family All 50
Tenable Nessus	Adobe ColdFusion Code Execution (APSB23-25) (Direct Check)	1 Aug 202300:00	–	nessus
Tenable Nessus	Adobe ColdFusion < 2018.x < 2018u17 / 2021.x < 2021u7 / 2023.x < 2023u1 Multiple Vulnerabilities (APSB23-40)	13 Jul 202300:00	–	nessus
Tenable Nessus	Adobe ColdFusion < 2018.x < 2018u18 / 2021.x < 2021u8 / 2023.x < 2023u2 Code Execution (APSB23-41)	18 Jul 202300:00	–	nessus
Tenable Nessus	Adobe ColdFusion Remote Code Execution	5 Oct 202300:00	–	nessus
ATTACKERKB	CVE-2023-29300	12 Jul 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-38203	20 Jul 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-29298	12 Jul 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the ColdFusion software platform, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.	24 Jul 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.	31 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-29300	11 Jul 202319:46	–	circl

NVD

Node

adobe coldfusionMatch2018-

adobe coldfusionMatch2018update1

adobe coldfusionMatch2018update10

adobe coldfusionMatch2018update11

adobe coldfusionMatch2018update12

adobe coldfusionMatch2018update13

adobe coldfusionMatch2018update14

adobe coldfusionMatch2018update15

adobe coldfusionMatch2018update16

adobe coldfusionMatch2018update17

adobe coldfusionMatch2018update2

adobe coldfusionMatch2018update3

adobe coldfusionMatch2018update4

adobe coldfusionMatch2018update5

adobe coldfusionMatch2018update6

adobe coldfusionMatch2018update7

adobe coldfusionMatch2018update8

adobe coldfusionMatch2018update9

adobe coldfusionMatch2021-

adobe coldfusionMatch2021update1

adobe coldfusionMatch2021update2

adobe coldfusionMatch2021update3

adobe coldfusionMatch2021update4

adobe coldfusionMatch2021update5

adobe coldfusionMatch2021update6

adobe coldfusionMatch2021update7

adobe coldfusionMatch2023-

adobe coldfusionMatch2023update1

[
  {
    "defaultStatus": "affected",
    "product": "ColdFusion",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "cf2023U1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/coldfusion/apsb23-41.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 06:09Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.99988

SSVC