CyberSec.Space Logo
CVEブラウザに戻る

CVE-2023-26359

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-03-23
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦
Adobe

Coldfusion

= 2018= 2021

References & Advisories

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26359

関連するセキュリティ記事

グローバル・サイバーインテリジェンス・ダイジェスト：2026年7月21日

VMware vCenter、F5 BIG-IP、および GitLab における重大な脆弱性アドバイザリの技術分析と、インフラ・医療機関を対象とした最新セキュリティ対策ガイド。

2026-07-21

関連する脆弱性情報

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...