CVE-2018-15959

2018-09-2513:00:00

adobe

www.cve.org

9.7 High

AI Score

Confidence

High

0.507 Medium

EPSS

Percentile

97.5%

JSON

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

CNA Affected

[
  {
    "product": "ColdFusion",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"
      }
    ]
  }
]