Coldfusion Security Vulnerabilities and Issues — Coldfusion CVE List

Lucene search

AdobeColdfusion

5 matches found

CVE•added 2018/05/19 5:29 p.m.•924 views

CVE-2018-4939

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.

10CVSS9.5AI score0.85528EPSS

CVE•added 2018/05/19 5:29 p.m.•51 views

CVE-2018-4942

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.

7.5CVSS8.1AI score0.00902EPSS

CVE•added 2018/05/19 5:29 p.m.•49 views

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation.

7.8CVSS8.4AI score0.00195EPSS

CVE•added 2018/05/19 5:29 p.m.•43 views

CVE-2018-4940

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure.

6.1CVSS6.8AI score0.01145EPSS

CVE•added 2018/05/19 5:29 p.m.•42 views

CVE-2018-4941

6.1CVSS6.8AI score0.01145EPSS