CVE-2022-42340 - Vulnerability Details

Vendors	Products
Adobe	Coldfusion

Link	Providers
https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-42340", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "assignerShortName": "adobe", "dateUpdated": "2025-04-23T16:48:22.254Z", "dateReserved": "2022-10-03T00:00:00.000Z", "datePublished": "2022-10-14T19:42:57.569Z"}, "containers": {"cna": {"title": "Adobe ColdFusion Improper Input Validation Arbitrary file system read", "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2022-10-14T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction."}], "affected": [{"vendor": "Adobe", "product": "ColdFusion", "versions": [{"version": "unspecified", "lessThanOrEqual": "CF2021U4", "status": "affected", "versionType": "custom"}, {"version": "unspecified", "lessThanOrEqual": "CF2018u14", "status": "affected", "versionType": "custom"}, {"version": "unspecified", "lessThanOrEqual": "None", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "Improper Input Validation (CWE-20)", "cweId": "CWE-20"}]}], "source": {"discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T13:03:45.934Z"}, "title": "CVE Program Container", "references": [{"url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-23T13:05:58.748793Z", "id": "CVE-2022-42340", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-23T16:48:22.254Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-42340 (string)

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

assignerShortName : adobe (string)

dateUpdated : 2025-04-23T16:48:22.254Z (string)

dateReserved : 2022-10-03T00:00:00.000Z (string)

datePublished : 2022-10-14T19:42:57.569Z (string)

}

containers : { »

cna : { »

title : Adobe ColdFusion Improper Input Validation Arbitrary file system read (string)

providerMetadata : { »

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

dateUpdated : 2022-10-14T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. (string)

}

]

affected : [ »

0 : { »

vendor : Adobe (string)

product : ColdFusion (string)

versions : [ »

0 : { »

version : unspecified (string)

lessThanOrEqual : CF2021U4 (string)

status : affected (string)

versionType : custom (string)

}

1 : { »

version : unspecified (string)

lessThanOrEqual : CF2018u14 (string)

status : affected (string)

versionType : custom (string)

}

2 : { »

version : unspecified (string)

lessThanOrEqual : None (string)

status : affected (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : Improper Input Validation (CWE-20) (string)

cweId : CWE-20 (string)

}

]

}

]

source : { »

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T13:03:45.934Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-23T13:05:58.748793Z (string)

id : CVE-2022-42340 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-23T16:48:22.254Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-42340", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "assignerShortName": "adobe", "dateUpdated": "2025-04-23T16:48:22.254Z", "dateReserved": "2022-10-03T00:00:00.000Z", "datePublished": "2022-10-14T19:42:57.569Z"}, "containers": {"cna": {"title": "Adobe ColdFusion Improper Input Validation Arbitrary file system read", "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2022-10-14T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction."}], "affected": [{"vendor": "Adobe", "product": "ColdFusion", "versions": [{"version": "unspecified", "lessThanOrEqual": "CF2021U4", "status": "affected", "versionType": "custom"}, {"version": "unspecified", "lessThanOrEqual": "CF2018u14", "status": "affected", "versionType": "custom"}, {"version": "unspecified", "lessThanOrEqual": "None", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "Improper Input Validation (CWE-20)", "cweId": "CWE-20"}]}], "source": {"discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T13:03:45.934Z"}, "title": "CVE Program Container", "references": [{"url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-42340", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-23T13:05:58.748793Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-23T13:06:00.399Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-42340 (string)

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

assignerShortName : adobe (string)

dateUpdated : 2025-04-23T16:48:22.254Z (string)

dateReserved : 2022-10-03T00:00:00.000Z (string)

datePublished : 2022-10-14T19:42:57.569Z (string)

}

containers : { »

cna : { »

title : Adobe ColdFusion Improper Input Validation Arbitrary file system read (string)

providerMetadata : { »

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

dateUpdated : 2022-10-14T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. (string)

}

]

affected : [ »

0 : { »

vendor : Adobe (string)

product : ColdFusion (string)

versions : [ »

0 : { »

version : unspecified (string)

lessThanOrEqual : CF2021U4 (string)

status : affected (string)

versionType : custom (string)

}

1 : { »

version : unspecified (string)

lessThanOrEqual : CF2018u14 (string)

status : affected (string)

versionType : custom (string)

}

2 : { »

version : unspecified (string)

lessThanOrEqual : None (string)

status : affected (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : Improper Input Validation (CWE-20) (string)

cweId : CWE-20 (string)

}

]

}

]

source : { »

discovery : EXTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T13:03:45.934Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-42340 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-23T13:05:58.748793Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-23T13:06:00.399Z (string)

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*", "matchCriteriaId": "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*", "matchCriteriaId": "EDB126BF-E09D-4E58-A39F-1190407D1CAB", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*", "matchCriteriaId": "8DDD85DF-69A0-476F-8365-CD67C75CF0CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*", "matchCriteriaId": "23F63675-7817-4AF0-A7DB-5E35EDABF04E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*", "matchCriteriaId": "3E3BF53E-2C0D-4F79-8B62-4C2A50CB5F52", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*", "matchCriteriaId": "C26BF72C-E991-4170-B68B-09B20B6C0679", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*", "matchCriteriaId": "25B4B4F2-318F-4046-ADE5-E9DD64F83FD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*", "matchCriteriaId": "59649177-81EE-43C3-BFA5-E56E65B486DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*", "matchCriteriaId": "453B96ED-738A-4642-B461-C5216CF45CA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*", "matchCriteriaId": "58D32489-627B-4E49-9329-8A3B8F8E4903", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*", "matchCriteriaId": "6D5860E1-D293-48FE-9796-058B78B2D571", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*", "matchCriteriaId": "9F9336CC-E38F-4BCB-83CD-805EC7FEF806", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*", "matchCriteriaId": "97964507-047A-4CC8-8D2B-0EA0C7F9BD50", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*", "matchCriteriaId": "82208628-F32A-4380-9B0F-DC8507E7701D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*", "matchCriteriaId": "1563CE5E-A4F7-40A4-A050-BB96E332D8DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*", "matchCriteriaId": "7A94B406-C011-4673-8C2B-0DD94D46CC4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*", "matchCriteriaId": "AFD05E3A-10F9-4C75-9710-BA46B66FF6E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*", "matchCriteriaId": "D57C8681-AC68-47DF-A61E-B5C4B4A47663", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*", "matchCriteriaId": "75608383-B727-48D6-8FFA-D552A338A562", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*", "matchCriteriaId": "7773DB68-414A-4BA9-960F-52471A784379", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction."}, {"lang": "es", "value": "Adobe ColdFusion versiones Update 14 (y anteriores) y Update 4 (y anteriores) est\u00e1n afectadas por una vulnerabilidad de Comprobaci\u00f3n de Entrada Inapropiada que podr\u00eda resultar en una lectura arbitraria del sistema de archivos. No es requerida una interacci\u00f3n del usuario para la explotaci\u00f3n de este problema"}], "id": "CVE-2022-42340", "lastModified": "2024-11-21T07:24:47.117", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "psirt@adobe.com", "type": "Secondary"}]}, "published": "2022-10-14T20:15:17.367", "references": [{"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@adobe.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:* (string)

matchCriteriaId : 3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:* (string)

matchCriteriaId : EDB126BF-E09D-4E58-A39F-1190407D1CAB (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:* (string)

matchCriteriaId : 8DDD85DF-69A0-476F-8365-CD67C75CF0CE (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:* (string)

matchCriteriaId : 23F63675-7817-4AF0-A7DB-5E35EDABF04E (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:* (string)

matchCriteriaId : 3E3BF53E-2C0D-4F79-8B62-4C2A50CB5F52 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:* (string)

matchCriteriaId : C26BF72C-E991-4170-B68B-09B20B6C0679 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:* (string)

matchCriteriaId : 25B4B4F2-318F-4046-ADE5-E9DD64F83FD9 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:* (string)

matchCriteriaId : 59649177-81EE-43C3-BFA5-E56E65B486DF (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:* (string)

matchCriteriaId : 453B96ED-738A-4642-B461-C5216CF45CA3 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:* (string)

matchCriteriaId : 58D32489-627B-4E49-9329-8A3B8F8E4903 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:* (string)

matchCriteriaId : 6D5860E1-D293-48FE-9796-058B78B2D571 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:* (string)

matchCriteriaId : 9F9336CC-E38F-4BCB-83CD-805EC7FEF806 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:* (string)

matchCriteriaId : 97964507-047A-4CC8-8D2B-0EA0C7F9BD50 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:* (string)

matchCriteriaId : 82208628-F32A-4380-9B0F-DC8507E7701D (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:* (string)

matchCriteriaId : 1563CE5E-A4F7-40A4-A050-BB96E332D8DD (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:* (string)

matchCriteriaId : 7A94B406-C011-4673-8C2B-0DD94D46CC4C (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:* (string)

matchCriteriaId : AFD05E3A-10F9-4C75-9710-BA46B66FF6E6 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:* (string)

matchCriteriaId : D57C8681-AC68-47DF-A61E-B5C4B4A47663 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:* (string)

matchCriteriaId : 75608383-B727-48D6-8FFA-D552A338A562 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:* (string)

matchCriteriaId : 7773DB68-414A-4BA9-960F-52471A784379 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary file system read. Exploitation of this issue does not require user interaction. (string)

}

1 : { »

lang : es (string)

value : Adobe ColdFusion versiones Update 14 (y anteriores) y Update 4 (y anteriores) están afectadas por una vulnerabilidad de Comprobación de Entrada Inapropiada que podría resultar en una lectura arbitraria del sistema de archivos. No es requerida una interacción del usuario para la explotación de este problema (string)

}

]

id : CVE-2022-42340 (string)

lastModified : 2024-11-21T07:24:47.117 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : psirt@adobe.com (string)

type : Secondary (string)

}

]

}

published : 2022-10-14T20:15:17.367 (string)

references : [ »

0 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html (string)

}

]

sourceIdentifier : psirt@adobe.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : psirt@adobe.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object