Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-26360

high · 8.6Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2023-03-15Remediation due 2023-04-05

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

8.6
CVSS
97.3%
EPSS (exploit prob.)
100th
EPSS percentile
2023-03-23
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weaknesses

CWE-284

Affected products

VendorProductAffected versions
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2018
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-26360