Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-38203
HistoryJul 20, 2023 - 4:15 p.m.

CVE-2023-38203

2023-07-2016:15:12
CWE-502
[email protected]
web.nvd.nist.gov
adobe coldfusion
deserialization
vulnerability
2023
arbitrary code execution
exploitation
user interaction

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON

Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Affected configurations

NVD
Node
adobecoldfusionMatch2018-
OR
adobecoldfusionMatch2018update1
OR
adobecoldfusionMatch2018update10
OR
adobecoldfusionMatch2018update11
OR
adobecoldfusionMatch2018update12
OR
adobecoldfusionMatch2018update13
OR
adobecoldfusionMatch2018update14
OR
adobecoldfusionMatch2018update15
OR
adobecoldfusionMatch2018update16
OR
adobecoldfusionMatch2018update17
OR
adobecoldfusionMatch2018update2
OR
adobecoldfusionMatch2018update3
OR
adobecoldfusionMatch2018update4
OR
adobecoldfusionMatch2018update5
OR
adobecoldfusionMatch2018update6
OR
adobecoldfusionMatch2018update7
OR
adobecoldfusionMatch2018update8
OR
adobecoldfusionMatch2018update9
OR
adobecoldfusionMatch2021-
OR
adobecoldfusionMatch2021update1
OR
adobecoldfusionMatch2021update2
OR
adobecoldfusionMatch2021update3
OR
adobecoldfusionMatch2021update4
OR
adobecoldfusionMatch2021update5
OR
adobecoldfusionMatch2021update6
OR
adobecoldfusionMatch2021update7
OR
adobecoldfusionMatch2023-
OR
adobecoldfusionMatch2023update1

Related

cisa_kev 1
attackerkb 2
nessus 2
prion 1
nuclei 1
cve 2
hivepro 1
cvelist 2
thn 4
rapid7blog 1
trellix 2
adobe 1
cisa_kev
cisa_kev
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
2024-01-08 00:00:00
attackerkb
attackerkb
CVE-2023-38203
2023-07-20 00:00:00
CVE-2023-29298
2023-07-12 00:00:00
nessus
nessus
Adobe ColdFusion < 2018.x < 2018u18 / 2021.x < 2021u8 / 2023.x < 2023u2 Code Execution (APSB23-41)
2023-07-18 00:00:00
Adobe ColdFusion Code Execution (APSB23-25) (Direct Check)
2023-08-01 00:00:00
prion
prion
Deserialization of untrusted data
2023-07-20 16:15:00
nuclei
nuclei
Adobe ColdFusion - Deserialization of Untrusted Data
2024-02-26 21:30:22
cve
cve
CVE-2023-38203
2023-07-20 16:15:12
CVE-2023-38204
2023-09-14 08:15:07
hivepro
hivepro
Active Exploitation of Adobe ColdFusion Critical Vulnerabilities
2023-07-18 13:02:22
cvelist
cvelist
CVE-2023-38204 Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8
2023-09-14 07:40:13
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
2023-07-20 15:41:10
thn
thn
Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites
2023-07-18 05:56:00
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway
2023-07-19 03:21:00
Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability
2023-07-20 03:31:00
rapid7blog
rapid7blog
Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities
2023-07-17 19:48:51
trellix
trellix
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
The Bug Report - July 2023 Edition
2023-08-02 00:00:00
adobe
adobe
APSB23-41 : Security update available for Adobe ColdFusion
2023-07-14 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON
Related for NVD:CVE-2023-38203
cisa_kev1attackerkb2nessus2prion1nuclei1cve2hivepro1cvelist2thn4rapid7blog1trellix2adobe1