Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-44355

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to impact a minor integrity feature. Exploitation of this issue does require user interaction.

Published

2023-11-17T14:15:22.083

Last Modified

2024-11-21T08:25:44.550

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe coldfusion < 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2021 Yes
Application adobe coldfusion 2023 Yes
Application adobe coldfusion 2023 Yes
Application adobe coldfusion 2023 Yes
Application adobe coldfusion 2023 Yes
Application adobe coldfusion 2023 Yes
Application adobe coldfusion 2023 Yes
References