PULSEUnderground Intel

AO VIVO25sinais / 24h

FEED

ransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomvexy ransomware reclama a ZipAI · VN · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilities

← Todos os CVEs

CVE Watch—

CVE-2023-38205

Adobe ColdFusion Improper Access Control Vulnerability

CVSS

—

Sem CVSS

EPSS

99.8%

p100

KEV

SIM

20 de jul. de 2023

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.8%EPSS · 30 dias99.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Adobe / ColdFusion

Vulnerabilidade

Adobe ColdFusion Improper Access Control Vulnerability

Adicionado ao KEV

20 de jul. de 2023

Corrigir até

10 de ago. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html ; https://nvd.nist.gov/vuln/detail/CVE-2023-38205

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-4828210.0 CRÍ

KEV—80Adobe ColdFusion Path Traversal Vulnerability11d CVE-2010-28619.8 CRÍ

KEV—80Adobe ColdFusion Directory Traversal Vulnerability35d CVE-2023-29300—

KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2023-29298—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2018-15961—

KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—CVE-2024-20767—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—