Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
9.8
CVSSv3

CVE-2023-38204

Published: 14/09/2023 Updated: 19/09/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Coldfusion

Vulnerability Summary

Adobe ColdFusion versions 2018u18 (and previous versions), 2021u8 (and previous versions) and 2023u2 (and previous versions) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe coldfusion 2018

adobe coldfusion 2021

adobe coldfusion 2023

Vendor Advisories

Check Point Security Alerts: Adobe ColdFusion Insecure Deserialization (CVE-2023-38204)
Check Point Reference: CPAI-2023-1172 Date Published: 23 Nov 2023 Severity: Critical ...

References

CWE-502https://helpx.adobe.com/security/products/coldfusion/apsb23-47.htmlhttps://nvd.nist.govhttps://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-1172.html
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook