CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2023-38205

🔥 Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-09-14
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦
Adobe

Coldfusion

= 2018= 2021= 2023

References & Advisories

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38205

相關資安分析文章

全球網絡威脅情報摘要：2026 年 7 月 21 日

本期威脅情報分析 VMware vCenter、F5 BIG-IP 與 GitLab 關鍵漏洞安全修補警訊，同時彙整最新醫療與關鍵基礎設施平台遭勒索軟體攻擊之防禦防範措施。

2026-07-21

相關漏洞威脅

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...