Adobe ColdFusion 2018 Update 12

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*

part: a version: 2018 update: update12

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38206 vulnerable 2026-06-08 06:08:17.248982 ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:06.729Z
Updated: 2025-02-27T20:52:32.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38205 vulnerable 2026-06-08 06:08:17.247331 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
HIGH (7.5)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:12.725Z
Updated: 2025-10-21T23:05:37.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38204 vulnerable 2026-06-08 06:08:17.239278 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
CRITICAL (9.8)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:13.695Z
Updated: 2025-02-27T20:52:25.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38203 vulnerable 2026-06-08 06:08:17.223109 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CRITICAL (9.8)
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-07-20T15:41:10.683Z
Updated: 2025-10-21T23:05:42.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29301 vulnerable 2026-06-08 06:02:39.442207 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
HIGH (7.5)
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Published: 2023-07-12T15:46:07.887Z
Updated: 2025-03-05T18:53:27.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29300 vulnerable 2026-06-08 06:02:39.439472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29298 vulnerable 2026-06-08 06:02:39.407575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26361 vulnerable 2026-06-08 05:57:39.467793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26360 vulnerable 2026-06-08 05:57:39.466522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26359 vulnerable 2026-06-08 05:57:39.457000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42341 vulnerable 2026-06-08 05:49:29.789618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42340 vulnerable 2026-06-08 05:49:29.777571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38424 vulnerable 2026-06-08 05:47:16.364683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38423 vulnerable 2026-06-08 05:47:16.363479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38422 vulnerable 2026-06-08 05:47:16.362357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38421 vulnerable 2026-06-08 05:47:16.360577 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38420 vulnerable 2026-06-08 05:47:16.358935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38419 vulnerable 2026-06-08 05:47:16.352203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38418 vulnerable 2026-06-08 05:47:16.340780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35712 vulnerable 2026-06-08 05:46:05.167051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35711 vulnerable 2026-06-08 05:46:05.165711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35710 vulnerable 2026-06-08 05:46:05.164359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35690 vulnerable 2026-06-08 05:46:05.129554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28818 vulnerable 2026-06-08 05:42:45.893610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.