CVE-2018-15957
25.09.2018, 13:29
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.Enginsight
| Vendor | Product | Version |
|---|---|---|
| adobe | coldfusion | 11.0 |
| adobe | coldfusion | 11.0:update1 |
| adobe | coldfusion | 11.0:update10 |
| adobe | coldfusion | 11.0:update11 |
| adobe | coldfusion | 11.0:update12 |
| adobe | coldfusion | 11.0:update13 |
| adobe | coldfusion | 11.0:update14 |
| adobe | coldfusion | 11.0:update2 |
| adobe | coldfusion | 11.0:update3 |
| adobe | coldfusion | 11.0:update4 |
| adobe | coldfusion | 11.0:update5 |
| adobe | coldfusion | 11.0:update6 |
| adobe | coldfusion | 11.0:update7 |
| adobe | coldfusion | 11.0:update8 |
| adobe | coldfusion | 11.0:update9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References