Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2023-26360
HistoryMar 15, 2023 - 12:00 a.m.

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

2023-03-1500:00:00
CISA
www.cisa.gov
42
adobe coldfusion
deserialization
untrusted data
remote code execution
vulnerability

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS

0.965

Percentile

99.6%

JSON

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Related

ics 1
hackerone 1
thn 4
nuclei 1
exploitdb 1
packetstorm 3
impervablog 1
malwarebytes 3
hivepro 1
cve 1
zdt 2
prion 1
nvd 1
metasploit 2
githubexploit 3
cvelist 1
talosblog 1
rapid7blog 3
attackerkb 3
adobe 1
nessus 1
securelist 1
qualysblog 1
ics
ics
Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers
2023-12-05 12:00:00
hackerone
hackerone
U.S. Dept Of Defense: Unauthenticated File Read Adobe ColdFusion
2023-11-11 17:02:47
thn
thn
CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild
2023-03-16 04:47:00
Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
2023-12-06 10:10:00
Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog
2023-08-22 03:36:00
nuclei
nuclei
Unauthenticated File Read Adobe ColdFusion
2023-05-09 09:33:18
exploitdb
exploitdb
Adobe ColdFusion versions 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read
2024-03-11 00:00:00
packetstorm
packetstorm
Adobe ColdFusion Unauthenticated Arbitrary File Read
2024-08-31 00:00:00
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-05-01 00:00:00
Adobe ColdFusion 2018,15 / 2021,5 Arbitrary File Read
2024-03-11 00:00:00
impervablog
impervablog
CVE-2023-26360 – Adobe ColdFusion Arbitrary Code Execution
2023-04-04 10:04:27
malwarebytes
malwarebytes
Adobe Coldfusion vulnerability used in attacks on government servers
2023-12-06 14:15:54
Adobe ColdFusion vulnerability exploited in the wild
2023-08-23 12:30:00
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
hivepro
hivepro
Adobe ColdFusion Vulnerability Leads to Federal Agency Breach
2023-12-07 05:51:09
cve
cve
CVE-2023-26360
2023-03-23 20:15:15
zdt
zdt
Adobe ColdFusion Unauthenticated Remote Code Execution Exploit
2023-05-02 00:00:00
Adobe ColdFusion v 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read Exploit
2024-03-11 00:00:00
prion
prion
Improper access control
2023-03-23 20:15:00
nvd
nvd
CVE-2023-26360
2023-03-23 20:15:15
metasploit
metasploit
Adobe ColdFusion Unauthenticated Remote Code Execution
2023-04-14 14:52:13
Adobe ColdFusion Unauthenticated Arbitrary File Read
2023-04-14 14:52:13
githubexploit
githubexploit
Exploit for Improper Access Control in Adobe Coldfusion
2023-12-26 06:26:01
Exploit for Improper Access Control in Adobe Coldfusion
2024-09-03 09:53:57
Exploit for Improper Access Control in Adobe Coldfusion
2024-05-14 11:22:35
cvelist
cvelist
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution
2023-03-23 00:00:00
talosblog
talosblog
A personal Year in Review to round out 2023
2023-12-14 19:00:09
rapid7blog
rapid7blog
Rapid7 Observed Exploitation of Adobe ColdFusion
2023-03-21 15:10:50
CVE-2023-29298: Adobe ColdFusion Access Control Bypass
2023-07-11 15:30:00
Metasploit Weekly Wrap-Up
2023-05-05 18:48:25
attackerkb
attackerkb
CVE-2023-26360
2023-03-23 00:00:00
CVE-2023-26359
2023-03-14 00:00:00
CVE-2023-29298
2023-07-12 00:00:00
adobe
adobe
APSB23-25 : Security update available for Adobe ColdFusion
2023-03-14 00:00:00
nessus
nessus
Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)
2023-03-16 00:00:00
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
qualysblog
qualysblog
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS

0.965

Percentile

99.6%

JSON
Related for CISA-KEV-CVE-2023-26360
ics1hackerone1thn4nuclei1exploitdb1packetstorm3impervablog1malwarebytes3hivepro1cve1zdt2prion1nvd1metasploit2githubexploit3cvelist1talosblog1rapid7blog3attackerkb3adobe1nessus1securelist1qualysblog1