Adobe ColdFusion 2018 Update 16
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:2018:update16:*:*:*:*:*:*
part: a version: 2018 update: update16
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38206 |
vulnerable | 2026-06-08 06:08:17.249252 |
ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:06.729Z
Updated: 2025-02-27T20:52:32.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38205 |
vulnerable | 2026-06-08 06:08:17.247479 |
ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
HIGH (7.5)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:12.725Z
Updated: 2025-10-21T23:05:37.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38204 |
vulnerable | 2026-06-08 06:08:17.239492 |
Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
CRITICAL (9.8)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:13.695Z
Updated: 2025-02-27T20:52:25.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38203 |
vulnerable | 2026-06-08 06:08:17.225979 |
Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CRITICAL (9.8)
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-07-20T15:41:10.683Z
Updated: 2025-10-21T23:05:42.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29301 |
vulnerable | 2026-06-08 06:02:39.442426 |
Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
HIGH (7.5)
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Published: 2023-07-12T15:46:07.887Z
Updated: 2025-03-05T18:53:27.475Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29300 |
vulnerable | 2026-06-08 06:02:39.439696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29298 |
vulnerable | 2026-06-08 06:02:39.410975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.