Adobe ColdFusion 2018 Update 14

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*

part: a version: 2018 update: update14

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion (db90b161-3a2c-5267-99af-6a14e5723f4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38206 vulnerable 2026-06-08 06:08:17.249124 ColdFusion | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:06.729Z
Updated: 2025-02-27T20:52:32.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38205 vulnerable 2026-06-08 06:08:17.247444 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
HIGH (7.5)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:12.725Z
Updated: 2025-10-21T23:05:37.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38204 vulnerable 2026-06-08 06:08:17.239450 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
CRITICAL (9.8)
Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-09-14T07:40:13.695Z
Updated: 2025-02-27T20:52:25.205Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38203 vulnerable 2026-06-08 06:08:17.224334 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CRITICAL (9.8)
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Published: 2023-07-20T15:41:10.683Z
Updated: 2025-10-21T23:05:42.563Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29301 vulnerable 2026-06-08 06:02:39.442376 Adobe ColdFusion Improper Restriction of Excessive Authentication Attempts Security feature bypass
HIGH (7.5)
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Published: 2023-07-12T15:46:07.887Z
Updated: 2025-03-05T18:53:27.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29300 vulnerable 2026-06-08 06:02:39.439643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29298 vulnerable 2026-06-08 06:02:39.409034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26361 vulnerable 2026-06-08 05:57:39.467835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26360 vulnerable 2026-06-08 05:57:39.466559 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26359 vulnerable 2026-06-08 05:57:39.458622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42341 vulnerable 2026-06-08 05:49:29.789836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42340 vulnerable 2026-06-08 05:49:29.778916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38424 vulnerable 2026-06-08 05:47:16.364719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38423 vulnerable 2026-06-08 05:47:16.363613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38422 vulnerable 2026-06-08 05:47:16.362393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38421 vulnerable 2026-06-08 05:47:16.360688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38420 vulnerable 2026-06-08 05:47:16.359054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38419 vulnerable 2026-06-08 05:47:16.352243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38418 vulnerable 2026-06-08 05:47:16.342245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35712 vulnerable 2026-06-08 05:46:05.167086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35711 vulnerable 2026-06-08 05:46:05.165749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35710 vulnerable 2026-06-08 05:46:05.164475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35690 vulnerable 2026-06-08 05:46:05.130946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.