CVE-2008-1203
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed...
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
Exploit likelihood
What each source reports
NVD Score used
7.5
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
- Record
CVE-2008-1203- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
- Record
CVE-2008-1203- Updated
- 2026-11-02
EUVDEUVD-2008-1212 No score
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
- Record
EUVD-2008-1212- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-29pv-6m7w-rq5f No score
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed...
The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
- Record
GHSA-29pv-6m7w-rq5f- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1203 is a high vulnerability (CVSS 7.5) in Adobe Coldfusion, published March 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.5%, the 96th percentile. No source names a fixed version.
References
secunia.com/advisories/29332
securityfocus.com/bid/28207
vupen.com/english/advisories/2008/0862/references
securitytracker.com/id?1019600
adobe.com/support/security/bulletins/apsb08-08.html
exchange.xforce.ibmcloud.com/vulnerabilities/41150
nvd.nist.gov/vuln/detail/CVE-2008-1203
github.com/advisories/GHSA-29pv-6m7w-rq5f