← CVE Intelligence

CVE-2022-35711

Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, the vulnerability is triggered when a crafted network packet is sent to the server.

Affected (CNA)

Vendor / productVersions
Adobe / ColdFusionaffected unspecified through CF2021U4; affected unspecified through CF2018u14; affected unspecified through None

CWE

CWE-122

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.