Skip to content
OpenAdvisories
High · 7.5 CVE-2018-4942 EUVD-2018-16727GHSA-7g3h-38qp-px8v

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity…

Published May 19, 2018 · Updated May 6, 2025 · Assigned by adobe

Description

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.

Affected products

VendorProductAffectedFixed
— Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions —

References