Known vulnerabilities in ColdFusion 2023 Update 2 - page 7

Vendor: Adobe
Software: ColdFusion
Version: 2023 Update 2
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 125
Public exploits: 2
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 2023 Update 2 ColdFusion 2023 Update 2 is affected by 125 vulnerabilities: 10 critical, 28 high, 41 medium, 46 low Critical High Medium Low

Vulnerabilities (125)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83150 - Improper input validation
CVE-2023-44355
CWE-20 Medium
No
No
2021 Update 12, 2023 Update 6 15.11.2023 SB2023111506
#VU83148 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44352
CWE-79 Low
No
No
2021 Update 12, 2023 Update 6 15.11.2023 SB2023111506
#VU78462 - Improper Access Control
CVE-2023-38206
CWE-284 Medium
No
No
2018 Update 19, 2021 Update 9, 2023 Update 3 20.07.2023 SB2023072078
#VU78461 - Deserialization of Untrusted Data
CVE-2023-38204
CWE-502 High
No
No
2018 Update 19, 2021 Update 9, 2023 Update 3 20.07.2023 SB2023072078
#VU78460 - Improper Access Control
CVE-2023-38205
CWE-284 Critical
No
Exploited
2018 Update 19, 2021 Update 9, 2023 Update 3 20.07.2023 SB2023072078


Showing elements 121 - 140 out of 125