Vulnerabilities > CVE-2022-35690 - Out-of-bounds Write vulnerability in Adobe Coldfusion 2018/2021

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
adobe
CWE-787
critical

Summary

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.

Vulnerable Configurations

Part Description Count
Application
Adobe
20

Common Weakness Enumeration (CWE)