CVE-2022-42340

high · 7.5

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.

7.5

CVSS

33.8%

EPSS (exploit prob.)

98th

EPSS percentile

2022-10-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2018
adobe	coldfusion	2021
adobe	coldfusion	2021
adobe	coldfusion	2021
adobe	coldfusion	2021
adobe	coldfusion	2021

Check a specific version with /api/v1/cve/match.

References

https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html
https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-42340