CVE-2023-44350
critical · 9.8Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
9.8
CVSS
64.6%
EPSS (exploit prob.)
99th
EPSS percentile
2023-11-17
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | coldfusion | < 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2021 |
| adobe | coldfusion | 2023 |
| adobe | coldfusion | 2023 |
| adobe | coldfusion | 2023 |
| adobe | coldfusion | 2023 |
| adobe | coldfusion | 2023 |
| adobe | coldfusion | 2023 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-44350