Adobe ColdFusion 2018 Update 18
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:coldfusion:2018:update18:*:*:*:*:*:*
part: a version: 2018 update: update18
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Coldfusion (db90b161-3a2c-5267-99af-6a14e5723f4c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38206 |
vulnerable | 2026-06-08 06:08:17.249273 |
ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:06.729Z
Updated: 2025-02-27T20:52:32.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38205 |
vulnerable | 2026-06-08 06:08:17.247498 |
ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
HIGH (7.5)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:12.725Z
Updated: 2025-10-21T23:05:37.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38204 |
vulnerable | 2026-06-08 06:08:17.241709 |
Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
CRITICAL (9.8)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:13.695Z
Updated: 2025-02-27T20:52:25.205Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.