Adobe ColdFusion < 2018.x< 2018 更新プログラム 16 / 2021.x< 2021 更新プログラム 6 の複数の脆弱性 (APSB23-25)

critical Nessus プラグイン ID 172595

Language:

バージョン 1.9 Jul 18, 2026, 3:00 PM Logic Changes (avoid false negative) Plugin Feed: 202607181500
バージョン 1.8 Apr 17, 2026, 5:33 AM New Plugin Feed: 202604170533
バージョン 1.7 Oct 30, 2025, 2:57 PM CVSSv3 score source (changed from "CVE-2023-26361" to none) CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSSv2 score source (changed from "CVE-2023-26359" to "CVE-2023-26360") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Plugin Feed: 202510301457
バージョン 1.6 Oct 22, 2025, 12:32 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N") CVSSv3 score source (set to "CVE-2023-26361") CVSSv3 severity (based on CVE-2023-26361, severity decreased from "High" to "Medium") CVSS metrics ("CVSSv3 score" set to 4.9) Plugin Feed: 202510221232
バージョン 1.5 Aug 22, 2023, 10:11 AM Exploit attributes ("Exploit framework metasploit" set to "True". "Exploited by malware" set to "True") CISA reference Plugin Feed: 202308221011
バージョン 1.4 Jul 13, 2023, 8:04 PM IAVM reference Plugin Feed: 202307132004
バージョン 1.3 Mar 24, 2023, 1:54 PM CVSS metrics ("CVSSv2 score" changed from "7.5" to "10.0". "CVSSv2 score" changed from "7.5" to "10.0". "CVSSv2 score" changed from "7.5" to "10.0". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C". "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202303241354
バージョン 1.2 Mar 16, 2023, 10:11 PM STIG Severity (set to "I") IAVM reference Plugin Feed: 202303162211
バージョン 1.1 Mar 16, 2023, 6:35 PM Exploit attributes ("Exploit available" set to "True". "Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") CISA reference CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Plugin Feed: 202303161835
バージョン 1.0 Mar 16, 2023, 12:00 PM New Plugin Feed: 202303161200

* Changelogs are generally available for changes made after Nov 1, 2022