CVE-2023-29301
High · 7.5CVSS
7.5
EPSS
34.7%
Published
Jul 12, 2023
CISA due date
—
The record
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the confidentiality of the user. Exploitation of this issue does not require user interaction.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116238 In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins… CWE-307
- CVE-2026-111501 Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of… CWE-307
- CVE-2026-22114 HTTP basic auth enforces no retry limit or backoff. CWE-307
- CVE-2026-107256 Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Shield… CWE-307
- CVE-2026-15586 Improper restriction of excessive authentication attempts vulnerability in İdvlabs… CWE-307
- CVE-2026-107145 The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the… CWE-307
- CVE-2026-116007 A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. CWE-307
- CVE-2026-65825 OpenReception's appointment booking software provides an end-to-end encrypted appointment… CWE-307