Unrated severityNVD Advisory· Published Oct 14, 2022· Updated Apr 23, 2025
Adobe ColdFusion Use of Hard-coded Credentials Application denial-of-service
CVE-2022-38420
Description
Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Use of Hard-coded Credentials vulnerability that could result in application denial-of-service by gaining access to start/stop arbitrary services. Exploitation of this issue does not require user interaction.
Affected products
2<= Update14, <= Update4+ 1 more
- (no CPE)range: <= Update14, <= Update4
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.