HIGH🇵🇱 Wersja polska

CVE-2021-40698

CVSS 7.4v3.1pub. 2023-09-07upd. 2024-11-21

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass  . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

  • Adobe Coldfusion

    APP
    Adobe
    20182021< 2018
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-38203CRITICAL9.8⚠ KEVten sam produkt

Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by...

CVE-2023-29300CRITICAL9.8⚠ KEVten sam produkt

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are af...

CVE-2023-26359CRITICAL9.8⚠ KEVten sam produkt

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deser...

CVE-2018-15961CRITICAL9.8⚠ KEVten sam produkt

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier h...

CVE-2018-4939CRITICAL9.8⚠ KEVten sam produkt

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitab...