Coldfusion 2023

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion_2023:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion 2023 (3439e370-7183-5a7f-90af-017092e403ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-48338 vulnerable 2026-07-29 00:55:01.277009 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
MEDIUM (6.8)
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T21:04:11.745Z
Updated: 2026-07-16T15:01:16.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48332 vulnerable 2026-07-29 00:55:01.275417 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (7.7)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T21:04:13.906Z
Updated: 2026-07-15T17:38:35.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48329 vulnerable 2026-07-29 00:55:01.274983 ColdFusion | Insufficient Session Expiration (CWE-613)
LOW (2.7)
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Published: 2026-07-14T21:04:10.998Z
Updated: 2026-07-15T14:36:31.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48328 vulnerable 2026-07-29 00:55:01.274764 ColdFusion | Improper Input Validation (CWE-20)
HIGH (7.7)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T21:04:07.429Z
Updated: 2026-07-15T15:12:02.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48327 vulnerable 2026-07-29 00:55:01.274461 ColdFusion | Incorrect Authorization (CWE-863)
CRITICAL (9)
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-07-14T21:04:12.455Z
Updated: 2026-07-15T10:33:15.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48325 vulnerable 2026-07-29 00:55:01.274036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48324 vulnerable 2026-07-29 00:55:01.273807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48322 vulnerable 2026-07-29 00:55:01.273450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48321 vulnerable 2026-07-29 00:55:01.273233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48320 vulnerable 2026-07-29 00:55:01.273021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48319 vulnerable 2026-07-29 00:55:01.272660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48318 vulnerable 2026-07-29 00:55:01.272304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48284 vulnerable 2026-07-29 00:55:01.244386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.