CVE-2022-38998

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:16+00:00| seen| https://t.me/cibsecurity/51475...

CVE-2022-41598

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:13+00:00| seen| https://t.me/cibsecurity/51472 2025-05-14 16:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16331...

CVE-2022-41602

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:12+00:00| seen| https://t.me/cibsecurity/51471...

CVE-2022-42232

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:08+00:00| seen| https://t.me/cibsecurity/51467...

CVE-2022-42234

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:04+00:00| seen| https://t.me/cibsecurity/51463 2025-05-14 14:31:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16311...

CVE-2022-41593

creationtimestamp| type| source ---|---|--- 2022-10-14 20:29:23+00:00| seen| https://t.me/cibsecurity/51459 2025-05-14 21:32:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16420...

CVE-2022-20397

creationtimestamp| type| source ---|---|--- 2022-10-14 20:29:17+00:00| seen| https://t.me/cibsecurity/51456...

CVE-2022-20464

creationtimestamp| type| source ---|---|--- 2022-10-14 20:29:08+00:00| seen| https://t.me/cibsecurity/51450...

CVE-2022-41307

creationtimestamp| type| source ---|---|--- 2022-10-14 20:29:00+00:00| seen| https://t.me/cibsecurity/51443...

CVE-2022-38423

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction, but doe...

CVE-2022-38419

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

CVE-2022-35712

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is...

Path traversal

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction...

Xxe

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

Hardcoded credentials

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interactio...

Path traversal

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. Exploitation of this issue does not require user interaction, bu...

CVE-2022-42340

Adobe ColdFusion is affected by CVE-2022-42340 due to an Improper Input Validation vulnerability that enables arbitrary file system reads. According to the connected advisories, the issue impacts ColdFusion versions prior to the security updates in APSB22-44 (notably older Update 14 and Update 4 ...

CVE-2022-42340 Adobe ColdFusion Improper Input Validation Arbitrary file system read

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

CVE-2022-38419 Adobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction...

CVE-2022-38421 Adobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability

Adobe ColdFusion versions Update 14 and earlier and Update 4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does...