Adobe ColdFusion 2023 Update 22

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2023:update22:*:*:*:*:*:*

part: a version: 2023 update: update22

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-106623 vulnerable 2026-11-03 10:16:14.091527 ColdFusion | Incorrect Authorization (CWE-863)
HIGH (7.5)
ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
Published: 2026-10-13T20:21:24.316Z
Updated: 2026-10-17T00:49:54.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21269 vulnerable 2026-09-16 04:34:12.990397 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
MEDIUM (4.6)
ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
Published: 2026-08-11T16:31:02.383Z
Updated: 2026-09-08T19:37:43.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.