Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-15965 EUVD-2018-7821GHSA-pxw5-gw5p-c5cc

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untr…

Published Sep 25, 2018 · Updated May 6, 2025 · Assigned by adobe

Vendor: Adobe Product: ColdFusion

Description

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
Adobe ColdFusion July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions —

References