CVE-2018-15957

CRITICAL 9.8CVE-2018-15957 · Published 25/09/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
coldfusion adobe	`= 11.0= 2016= 2018`	No fix yet

Description

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

References

securityfocus.com/bid/105313 · Third Party Advisory
securitytracker.com/id/1041621 · Third Party Advisory
helpx.adobe.com/security/products/coldfusion/apsb18-33.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free