Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2018:update17:*:*:*:*:*:*

part: a version: 2018 update: update17

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38203 vulnerable 2026-06-08 06:08:17.226583 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CRITICAL (9.8)
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-07-20T15:41:10.683Z
Updated: 2025-10-21T23:05:42.563Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.