CVE-2018-15965 Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead....
CriticalCVSS 9.8
EPSS 25.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe coldfusion | = 11.0 | No fix listed |
| Adobe coldfusion | = 11.0-update1 | No fix listed |
| Adobe coldfusion | = 11.0-update10 | No fix listed |
| Adobe coldfusion | = 11.0-update11 | No fix listed |
| Adobe coldfusion | = 11.0-update12 | No fix listed |
| Adobe coldfusion | = 11.0-update13 | No fix listed |
| Adobe coldfusion | = 11.0-update14 | No fix listed |
| Adobe coldfusion | = 11.0-update2 | No fix listed |
| Adobe coldfusion | = 11.0-update3 | No fix listed |
| Adobe coldfusion | = 11.0-update4 | No fix listed |
| Adobe coldfusion | = 11.0-update5 | No fix listed |
| Adobe coldfusion | = 11.0-update6 | No fix listed |
| Adobe coldfusion | = 11.0-update7 | No fix listed |
| Adobe coldfusion | = 11.0-update8 | No fix listed |
| Adobe coldfusion | = 11.0-update9 | No fix listed |
| Adobe coldfusion | = 2016 | No fix listed |
| Adobe coldfusion | = 2016-update1 | No fix listed |
| Adobe coldfusion | = 2016-update2 | No fix listed |
| Adobe coldfusion | = 2016-update3 | No fix listed |
| Adobe coldfusion | = 2016-update4 | No fix listed |
| Adobe coldfusion | = 2016-update5 | No fix listed |
| Adobe coldfusion | = 2016-update6 | No fix listed |
| Adobe coldfusion | = 2018 | No fix listed |
| Adobe coldfusion | = July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions | No fix listed |
References
- 105313 third-party-advisory vdb-entry
- 1041621 third-party-advisory vdb-entry
- helpx.adobe.com vendor-advisory