Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2023-26360
HistoryMar 23, 2023 - 8:15 p.m.

Improper access control

2023-03-2320:15:00
PRIOn knowledge base
www.prio-n.com
9

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.961 High

EPSS

Percentile

99.5%

JSON

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Related

ics 1
hackerone 1
malwarebytes 3
hivepro 1
thn 3
zdt 2
cve 1
metasploit 2
githubexploit 1
nuclei 1
exploitdb 1
impervablog 1
cisa_kev 1
packetstorm 2
talosblog 1
rapid7blog 3
attackerkb 3
adobe 1
nessus 1
qualysblog 1
ics
ics
Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers
2023-12-05 12:00:00
hackerone
hackerone
U.S. Dept Of Defense: Unauthenticated File Read Adobe ColdFusion
2023-11-11 17:02:47
malwarebytes
malwarebytes
Adobe Coldfusion vulnerability used in attacks on government servers
2023-12-06 14:15:54
Adobe ColdFusion vulnerability exploited in the wild
2023-08-23 12:30:00
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
hivepro
hivepro
Adobe ColdFusion Vulnerability Leads to Federal Agency Breach
2023-12-07 05:51:09
thn
thn
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
2023-12-06 10:10:00
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
2023-03-16 04:47:00
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
2023-08-22 03:36:00
zdt
zdt
Adobe ColdFusion Unauthenticated Remote Code Execution Exploit
2023-05-02 00:00:00
Adobe ColdFusion v 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read Exploit
2024-03-11 00:00:00
cve
cve
CVE-2023-26360
2023-03-23 20:15:15
metasploit
metasploit
Adobe ColdFusion Unauthenticated Arbitrary File Read
2023-04-14 14:52:13
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-04-14 14:52:13
githubexploit
githubexploit
Exploit for Improper Access Control in Adobe Coldfusion
2023-12-26 06:26:01
nuclei
nuclei
Unauthenticated File Read Adobe ColdFusion
2023-05-09 09:33:18
exploitdb
exploitdb
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read
2024-03-11 00:00:00
impervablog
impervablog
CVE-2023-26360 – Adobe ColdFusion Arbitrary Code Execution
2023-04-04 10:04:27
cisa_kev
cisa_kev
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
2023-03-15 00:00:00
packetstorm
packetstorm
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-05-01 00:00:00
Adobe ColdFusion 2018,15 / 2021,5 Arbitrary File Read
2024-03-11 00:00:00
talosblog
talosblog
A personal Year in Review to round out 2023
2023-12-14 19:00:09
rapid7blog
rapid7blog
Rapid7 Observed Exploitation of Adobe ColdFusion
2023-03-21 15:10:50
CVE-2023-29298: Adobe ColdFusion Access Control Bypass
2023-07-11 15:30:00
Metasploit Weekly Wrap-Up
2023-05-05 18:48:25
attackerkb
attackerkb
CVE-2023-26359
2023-03-14 00:00:00
CVE-2023-26360
2023-04-14 00:00:00
CVE-2023-29298
2023-07-12 00:00:00
adobe
adobe
APSB23-25 : Security update available for Adobe ColdFusion
2023-03-14 00:00:00
nessus
nessus
Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)
2023-03-16 00:00:00
qualysblog
qualysblog
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

9.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.961 High

EPSS

Percentile

99.5%

JSON
Related for PRION:CVE-2023-26360
ics1hackerone1malwarebytes3hivepro1thn3zdt2cve1metasploit2githubexploit1nuclei1exploitdb1impervablog1cisa_kev1packetstorm2talosblog1rapid7blog3attackerkb3adobe1nessus1qualysblog1