CVE-2018-15964

CVE-2018-15964 affects Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier, due to a vulnerable component leading to information disclosure. CVSS indicates high confidentiality impact (C:H/I:N/A:N; network attack). The issue was among multi...

CVE-2018-15958

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15959

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15958

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2018-15961

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

CVE-2018-15958: Deserialization of Untrusted Data

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2018-13305

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the use of a component with a known vulnerability. Successful exploitation could lead to arbitrary file...

PT-2018-13304

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the deserialization of untrusted data, which could lead to arbitrary code execution if successfully...

PT-2018-13307

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is a security bypass vulnerability that could lead to arbitrary folder creation if successfully exploited...

CVE-2018-15959: Deserialization of Untrusted Data

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2018-13309

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the deserialization of untrusted data, which could lead to arbitrary code execution if successfully...

PT-2018-13308

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the use of a component with a known vulnerability, which could lead to information disclosure if...

CVE-2018-15963: Undefined Security Weakness

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation...

CVE-2018-15964: Exposure of Sensitive Information to an Unauthorized Actor

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure...

PT-2018-13302 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description: The issue is related to the deserialization of untrusted data, which could lead to arbitrary code execution if successfully...

PT-2018-13303

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to the deserialization of untrusted data, which could lead to arbitrary code execution if successfully...

CVE-2018-15960: Improper Input Validation

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite...

Adobe ColdFusion CKEditor file upload

A file upload vulnerability in the CKEditor of Adobe ColdFusion 11 Update 14 and earlier, ColdFusion 2016 Update 6 and earlier, and ColdFusion 2018 July 12 release allows unauthenticated remote attackers to upload and execute JSP files through the filemanager plugin. Recent assessments: jrobles-r...

CVE-2018-15957: Deserialization of Untrusted Data

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2018-13306

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018.0.0.310739 through Update 6 Adobe ColdFusion versions through Update 14 Description The issue is related to a directory listing vulnerability. Successful exploitation could lead to information disclosure...