Skip to content
OpenAdvisories
Critical · 9.8 Known exploited CVE-2018-4939 EUVD-2018-16724GHSA-p86w-qv2x-rf6j

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrust…

Published May 19, 2018 · Updated Oct 21, 2025 · Assigned by adobe

Description

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
— Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions —

References