Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions vulnerabilities

Product

Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions

by · last CVE May 19, 2018

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities1 In the news0 Timeline

Severity mix

Critical 1High 0Medium 0Low 0

Severity

All severities1 Critical1 High0 Medium0 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-4939 In wildKEV	9.8	62%	May 19	Adobe ColdFusion Deserialization of Untrusted Data Vulnerability Affected: Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions