CVE-2018-15958

CVE-2018-15958 affects Adobe ColdFusion: the July 12, 2018 release (version 2018.0.0.310739) and Update 6 and earlier, plus Update 14 and earlier, are vulnerable to a deserialization of untrusted data that could lead to arbitrary code execution . The issue is part of a set of four critical deseri...

CVE-2018-15962

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-15963

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation...

CVE-2018-15964

CVE-2018-15964 affects Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier, due to a vulnerable component leading to information disclosure. CVSS indicates high confidentiality impact (C:H/I:N/A:N; network attack). The issue was among multi...

CVE-2018-15959

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15958

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15961

CVE-2018-15961 affects Adobe ColdFusion 2018 (July 12 release 2018.0.0.310739) and Update 6 and earlier, and Update 14 and earlier. The vulnerability is an unrestricted file upload via CKEditor (upload.cfm) that could allow remote attackers to upload arbitrary files and execute code on the affect...

CVE-2018-15962

Adobe ColdFusion is affected by a directory listing vulnerability (CVE-2018-15962). Impacted are ColdFusion 2016 Update 6 and earlier, the 2018-07-12 release (2018.0.0.310739) and Update 14 and earlier, and ColdFusion 11 Update 14 and earlier. Successful exploitation could disclose sensitive info...

CVE-2018-15965

CVE-2018-15965 affects Adobe ColdFusion: deserialization of untrusted data in the July 12, 2018 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier. Root cause is insecure deserialization enabling arbitrary code execution. CVSS v3.0 base score 9.8 (CRITICAL); impact on conf...

CVE-2018-15961: Unrestricted Upload of File with Dangerous Type

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15958: Deserialization of Untrusted Data

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15961

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

PT-2018-13305

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the use of a component with a known vulnerability. Successful exploitation could lead to arbitrary file...

PT-2018-13307

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is a security bypass vulnerability that could lead to arbitrary folder creation if successfully exploited...

CVE-2018-15962: Exposure of Sensitive Information to an Unauthorized Actor

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure...

PT-2018-13309

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the deserialization of untrusted data, which could lead to arbitrary code execution if successfully...

CVE-2018-15965: Deserialization of Untrusted Data

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2018-13308

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the use of a component with a known vulnerability, which could lead to information disclosure if...

CVE-2018-15963: Undefined Security Weakness

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation...

CVE-2018-15964: Exposure of Sensitive Information to an Unauthorized Actor

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure...