Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-44351

critical · 9.8

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

9.8
CVSS
50.2%
EPSS (exploit prob.)
99th
EPSS percentile
2023-11-17
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Affected products

VendorProductAffected versions
adobecoldfusion< 2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2021
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023
adobecoldfusion2023

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-44351