Adobe Coldfusion 漏洞

时间轴

去年

版本

9.038
8.032
9.0.131
8.0.127
7.020

修正

Official Fix114
Temporary Fix0
Workaround0
Unavailable0
Not Defined39

易受攻击性

High10
Functional1
Proof-of-Concept28
Unproven6
Not Defined108

访问向量

Not Defined0
Physical0
Local10
Adjacent2
Network141

身份验证

Not Defined0
High4
Low12
None137

用户交互

Not Defined0
Required52
None101

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤30
≤410
≤528
≤638
≤726
≤822
≤926
≤103

CVSSv3 Temp

≤10
≤20
≤30
≤414
≤533
≤635
≤725
≤820
≤924
≤102

VulDB

≤10
≤20
≤32
≤410
≤541
≤636
≤722
≤836
≤93
≤103

NVD

≤10
≤20
≤30
≤40
≤51
≤62
≤79
≤811
≤91
≤1020

CNA

≤10
≤20
≤30
≤40
≤53
≤61
≤72
≤813
≤92
≤1012

供应商

≤10
≤20
≤30
≤40
≤51
≤62
≤72
≤83
≤91
≤104

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k4
<5k99
<10k43
<25k6
<50k1
<100k0
≥100k0

本日攻击

<1k140
<2k6
<5k7
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (84): 3, 3.0.1, 3.0.2, 3.0.3, 4.5, 5.0, 6.0, 6.0 , 6.1, 7, 7.0, 7.0.1, 7.0.2, 7.02, 7.2, 8.0, 8.0.1, 8.1, 9.0, 9.0.1, 9.0.2, 10, 10.0, 11, 11 Update 6, 11 Update 7, 11 Update 8, 11 Update 9, 11.0, 2016, 2016 Update, 2016 Update 1, 2016 Update 4, 2016 Update 6, 2016 Update 7, 2016 Update 9, 2016 Update 10, 2016 Update 16, 2018, 2018 U13, 2018 Update 1, 2018 Update 2, 2018 Update 3, 2018 Update 4, 2018 Update 9, 2018 Update 10, 2018 Update 14, 2018 Update 15, 2018u17, 2021 U3, 2021 Update 4, 2021 Update 5, 2021.0, 2021.1, 2021.2, 2021.3, 2021.4, 2021.5, 2021.6, 2021.7, 2021.8, 2021.9, 2021.10, 2021.11, 2021u7, 2023.0, 2023.0.0.330468, 2023.1, 2023.2, 2023.3, 2023.4, 2023.5, 2023u1, <=10 Update 17, <=10 Update 18, <=10 Update 19, <=10 Update 20, <=11 Update 12, <=11 Update 14, <=11 Update 15, <=11 Update 17, <=11 Update 18, <=2016 Update 11, <=2016 Update 15

Link to Product Website: https://www.adobe.com/

软件类型: Programming Language Software

已发布BaseTemp漏洞0day今天修正CTICVE
2024-03-136.76.6Adobe ColdFusion 2021/ColdFusion 2023 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-20767
2023-11-175.25.1Adobe ColdFusion URL 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-44352
2023-11-174.34.2Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-44355
2023-11-177.47.2Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-26347
2023-11-178.58.4Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-44353
2023-11-178.58.4Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-44351
2023-11-178.58.4Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-44350
2023-09-145.35.2Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38206
2023-09-146.46.3Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-38205
2023-09-148.58.4Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-38204
2023-09-076.86.7Adobe ColdFusion CFIDE Path 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-40699
2023-09-076.86.7Adobe ColdFusion Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-40698
2023-07-207.67.5Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-38203
2023-07-125.65.5Adobe ColdFusion 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-29301
2023-07-126.46.3Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29298
2023-07-128.58.4Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-29300
2023-03-243.83.7Adobe ColdFusion 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-26361
2023-03-248.68.5Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-26360
2023-03-248.07.9Adobe ColdFusion 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-26359
2022-10-116.86.7Adobe ColdFusion XML External Entity$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-42341
2022-10-116.86.7Adobe ColdFusion 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-42340
2022-10-116.46.3Adobe ColdFusion 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-38424
2022-10-113.83.8Adobe ColdFusion 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-38423
2022-10-116.06.0Adobe ColdFusion 信息公开$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-38422
2022-10-116.05.9Adobe ColdFusion 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2022-38421

128 更多条目未显示

更多条目由 Adobe

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!