This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-29301 | BDVDB-2026-207101 Detail

AdobeColdFusion

Description#

Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-307 Improper Restriction of Excessive Authentication Attempts (CWE-307)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.