← Back to browse · API

CVE-2022-42340

Severity
HIGH
CVSS
7.5
EPSS
0.33841
Risk score
41.84
CISA KEV
No
PoC
No
Published
2022-10-14
Modified
2025-04-23
First seen
2026-08-07
Aliases
EUVD-2022-45415, GHSA-M274-MR5X-8JXG
Products
Adobe:ColdFusion unspecified ≤CF2018u14, Adobe:ColdFusion unspecified ≤CF2021U4, Adobe:ColdFusion unspecified ≤None
Sources
euvd EUVD-2022-45415

Description

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction.

References