CyberSec.Space Logo
CVEブラウザに戻る

CVE-2023-29298

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-07-12
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦
Adobe

Coldfusion

= 2018= 2021= 2023

References & Advisories

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29298

関連するセキュリティ記事

グローバル・サイバーインテリジェンス・ダイジェスト：2026年7月21日

VMware vCenter、F5 BIG-IP、および GitLab における重大な脆弱性アドバイザリの技術分析と、インフラ・医療機関を対象とした最新セキュリティ対策ガイド。

2026-07-21

関連する脆弱性情報

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...