CVE-2023-44353

CVSS 3.1: 9.8 critical
EPSS: 80%p100
Published: Nov 17, 2023 · Nov 17, 2023
Modified: Jun 17, 2026

Analyze CVE-2023-44353 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

Vendors: adobe

Products: coldfusion

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (80.2%)

In the news

2 stories

Thousands of ColdFusion exploit attempts spotted during Christmas holiday

Security AffairsJan 4, 12:31 UTC · Jan 4, 2026VulnerabilityCVE-2023-26359 CVE-2023-38205 CVE-2023-44353+71

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

The Hacker NewsJan 1, 15:52 UTC · Jan 1, 2026MalwareCVE-2023-26359 CVE-2023-38205 CVE-2023-44353+72 · 1 read