Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-26360
HistoryMar 23, 2023 - 8:15 p.m.

CVE-2023-26360

2023-03-2320:15:15
CWE-284
[email protected]
web.nvd.nist.gov
1
adobe coldfusion
2018
2021
improper access control
arbitrary code execution

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

0.952 High

EPSS

Percentile

99.4%

JSON

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Affected configurations

NVD
Node
adobecoldfusionMatch2018-
OR
adobecoldfusionMatch2018update1
OR
adobecoldfusionMatch2018update10
OR
adobecoldfusionMatch2018update11
OR
adobecoldfusionMatch2018update12
OR
adobecoldfusionMatch2018update13
OR
adobecoldfusionMatch2018update14
OR
adobecoldfusionMatch2018update15
OR
adobecoldfusionMatch2018update2
OR
adobecoldfusionMatch2018update3
OR
adobecoldfusionMatch2018update4
OR
adobecoldfusionMatch2018update5
OR
adobecoldfusionMatch2018update6
OR
adobecoldfusionMatch2018update7
OR
adobecoldfusionMatch2018update8
OR
adobecoldfusionMatch2018update9
OR
adobecoldfusionMatch2021-
OR
adobecoldfusionMatch2021update1
OR
adobecoldfusionMatch2021update2
OR
adobecoldfusionMatch2021update3
OR
adobecoldfusionMatch2021update4
OR
adobecoldfusionMatch2021update5

Related

hackerone 1
ics 1
cisa_kev 1
packetstorm 2
impervablog 1
githubexploit 2
zdt 2
metasploit 2
cvelist 1
thn 3
nuclei 1
exploitdb 1
malwarebytes 3
prion 1
hivepro 1
cve 1
attackerkb 3
talosblog 1
rapid7blog 3
nessus 1
adobe 1
qualysblog 1
hackerone
hackerone
U.S. Dept Of Defense: Unauthenticated File Read Adobe ColdFusion
2023-11-11 17:02:47
ics
ics
Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers
2023-12-05 12:00:00
cisa_kev
cisa_kev
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
2023-03-15 00:00:00
packetstorm
packetstorm
Adobe ColdFusion 2018,15 / 2021,5 Arbitrary File Read
2024-03-11 00:00:00
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-05-01 00:00:00
impervablog
impervablog
CVE-2023-26360 – Adobe ColdFusion Arbitrary Code Execution
2023-04-04 10:04:27
githubexploit
githubexploit
Exploit for Improper Access Control in Adobe Coldfusion
2024-05-14 11:22:35
Exploit for Improper Access Control in Adobe Coldfusion
2023-12-26 06:26:01
zdt
zdt
Adobe ColdFusion v 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read Exploit
2024-03-11 00:00:00
Adobe ColdFusion Unauthenticated Remote Code Execution Exploit
2023-05-02 00:00:00
metasploit
metasploit
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-04-14 14:52:13
Adobe ColdFusion Unauthenticated Arbitrary File Read
2023-04-14 14:52:13
cvelist
cvelist
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution
2023-03-23 00:00:00
thn
thn
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
2023-03-16 04:47:00
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
2023-12-06 10:10:00
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
2023-08-22 03:36:00
nuclei
nuclei
Unauthenticated File Read Adobe ColdFusion
2023-05-09 09:33:18
exploitdb
exploitdb
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read
2024-03-11 00:00:00
malwarebytes
malwarebytes
Adobe Coldfusion vulnerability used in attacks on government servers
2023-12-06 14:15:54
Adobe ColdFusion vulnerability exploited in the wild
2023-08-23 12:30:00
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
prion
prion
Improper access control
2023-03-23 20:15:00
hivepro
hivepro
Adobe ColdFusion Vulnerability Leads to Federal Agency Breach
2023-12-07 05:51:09
cve
cve
CVE-2023-26360
2023-03-23 20:15:15
attackerkb
attackerkb
CVE-2023-26360
2023-04-14 00:00:00
CVE-2023-26359
2023-03-14 00:00:00
CVE-2023-29298
2023-07-12 00:00:00
talosblog
talosblog
A personal Year in Review to round out 2023
2023-12-14 19:00:09
rapid7blog
rapid7blog
CVE-2023-29298: Adobe ColdFusion Access Control Bypass
2023-07-11 15:30:00
Rapid7 Observed Exploitation of Adobe ColdFusion
2023-03-21 15:10:50
Metasploit Weekly Wrap-Up
2023-05-05 18:48:25
nessus
nessus
Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)
2023-03-16 00:00:00
adobe
adobe
APSB23-25 : Security update available for Adobe ColdFusion
2023-03-14 00:00:00
qualysblog
qualysblog
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

0.952 High

EPSS

Percentile

99.4%

JSON
Related for NVD:CVE-2023-26360
hackerone1ics1cisa_kev1packetstorm2impervablog1githubexploit2zdt2metasploit2cvelist1thn3nuclei1exploitdb1malwarebytes3prion1hivepro1cve1attackerkb3talosblog1rapid7blog3nessus1adobe1qualysblog1