CVE-2023-38206: Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that…

PriorityP430medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

0.68%

48.7th percentile

Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints resulting in a low-confidentiality impact. Exploitation of this issue does not require user interaction.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	coldfusion	<= cf2023U2	—
adobe	coldfusion	—	—
adobe	coldfusion	—	—
adobe	coldfusion	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.