Adobe ColdFusion 2018 Update 8

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*

part: a version: 2018 update: update8

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38206 vulnerable 2026-06-08 06:08:17.249627 ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:06.729Z
Updated: 2025-02-27T20:52:32.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38205 vulnerable 2026-06-08 06:08:17.247613 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
HIGH (7.5)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:12.725Z
Updated: 2025-10-21T23:05:37.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38204 vulnerable 2026-06-08 06:08:17.242155 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
CRITICAL (9.8)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:13.695Z
Updated: 2025-02-27T20:52:25.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38203 vulnerable 2026-06-08 06:08:17.230935 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CRITICAL (9.8)
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-07-20T15:41:10.683Z
Updated: 2025-10-21T23:05:42.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29301 vulnerable 2026-06-08 06:02:39.442864 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
HIGH (7.5)
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Published: 2023-07-12T15:46:07.887Z
Updated: 2025-03-05T18:53:27.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29300 vulnerable 2026-06-08 06:02:39.440341 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29298 vulnerable 2026-06-08 06:02:39.417001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26361 vulnerable 2026-06-08 05:57:39.467984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26360 vulnerable 2026-06-08 05:57:39.466826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26359 vulnerable 2026-06-08 05:57:39.464883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42341 vulnerable 2026-06-08 05:49:29.790478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42340 vulnerable 2026-06-08 05:49:29.783798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38424 vulnerable 2026-06-08 05:47:16.365136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38423 vulnerable 2026-06-08 05:47:16.363736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38422 vulnerable 2026-06-08 05:47:16.362604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38421 vulnerable 2026-06-08 05:47:16.361147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38420 vulnerable 2026-06-08 05:47:16.359541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38419 vulnerable 2026-06-08 05:47:16.352701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38418 vulnerable 2026-06-08 05:47:16.346498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35712 vulnerable 2026-06-08 05:46:05.167285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35711 vulnerable 2026-06-08 05:46:05.166106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35710 vulnerable 2026-06-08 05:46:05.164773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35690 vulnerable 2026-06-08 05:46:05.135809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28818 vulnerable 2026-06-08 05:42:45.898214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40699 vulnerable 2026-06-08 05:35:18.944336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40698 vulnerable 2026-06-08 05:35:18.942111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21087 vulnerable 2026-06-08 05:29:11.304475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9673 vulnerable 2026-06-08 05:28:02.573287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9672 vulnerable 2026-06-08 05:28:02.569994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3796 vulnerable 2026-06-08 05:25:57.720541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3768 vulnerable 2026-06-08 05:25:57.701764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3767 vulnerable 2026-06-08 05:25:57.700313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.