Description
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2023 – 2023
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion2025 – 2025
- Adobe / ColdFusion 20230 – 2023.0.22
- Adobe / ColdFusion 20232023.0.23 – 2023.0.23
- Adobe / ColdFusion 20252025.0.12 – 2025.0.12
- Adobe / ColdFusion 20250 – 2025.0.11
References
Updated 4m ago · 8 sources