CVE-2022-35711

CVE-2022-35711 affects Adobe ColdFusion Update 14 and earlier and Update 4 and earlier. It is a heap-based buffer overflow triggered by a crafted network packet, enabling arbitrary code execution in the context of the current user without user interaction. Publicly documented remediation is to ap...

Adobe ColdFusion < 2018.x < 2018u15 / 2021.x < 2021u5 Multiple Vulnerabilities (APSB22-44)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 15 or 2021.x update 5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB22-44 advisory. - Stack-based Buffer Overflow CWE-121 potentially leading to Arbitrary code executi...