[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-29301":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":22,"technologies":63,"references":65,"score":67,"epss_score":68,"epss_percentile":69,"is_kev":70,"cisa_kev_date_added":71,"cisa_kev_due_date":71,"cisa_ssvc":72,"attack_mappings":82,"exploits":129},350304,"CVE-2023-29301","EUVD-2023-32876","Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.","2023-07-12T16:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":15},"UNCHANGED","3.1",7.5,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NONE","LOW",true,[21],"CWE-307",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62],"cpe:2.3:a:adobe:coldfusion:2018:update13:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update1:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update12:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update11:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update14:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:-:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update5:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update3:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update2:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update4:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2021:update6:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update15:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*","cpe:2.3:a:adobe:coldfusion:2018:update16:*:*:*:*:*:*",[64],"Adobe Coldfusion",[66],"https:\u002F\u002Fhelpx.adobe.com\u002Fsecurity\u002Fproducts\u002Fcoldfusion\u002Fapsb23-40.html",0.57,0.34713,0.98412,false,null,{"timestamp":73,"automatable":74,"tech_impact":75,"exploitation":76,"cisa_decision":77,"cisa_remediation_timeline":81},"2025-03-05T18:38:51.665934Z","yes","partial","none",{"vector":78,"decision":79,"priority":80},"CISAv1\u002FE:N\u002FA:Y\u002FT:P\u002FM:H\u002F2026-10-25T18:43:14.768451\u002F","attend","medium","14D",[83,89,100,108,115,122],{"name":84,"source":85,"tactics":86,"technique_id":88},"Exploit Public-Facing Application","attack_vector",[87],"initial-access","T1190",{"name":90,"source":91,"cwe_ids":92,"tactics":93,"capec_ids":97,"technique_id":99},"Valid Accounts","capec",[21],[87,94,95,96],"persistence","privilege-escalation","stealth",[98],"CAPEC-560","T1078",{"name":101,"source":91,"cwe_ids":102,"tactics":103,"capec_ids":105,"technique_id":107},"Password Guessing",[21],[104],"credential-access",[106],"CAPEC-49","T1110.001",{"name":109,"source":91,"cwe_ids":110,"tactics":111,"capec_ids":112,"technique_id":114},"Password Spraying",[21],[104],[113],"CAPEC-565","T1110.003",{"name":116,"source":91,"cwe_ids":117,"tactics":118,"capec_ids":119,"technique_id":121},"Credential Stuffing",[21],[104],[120],"CAPEC-600","T1110.004",{"name":123,"source":91,"cwe_ids":124,"tactics":125,"capec_ids":126,"technique_id":128},"Steal or Forge Kerberos Tickets",[21],[104],[127],"CAPEC-652","T1558",[]]