CVE-2018-15957: Critical severity adobe coldfusion vulnerability
Published Sep 25, 2018
·Updated
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
23 affected components
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update10
Adobe ColdFusion=11.0-update11
Adobe ColdFusion=11.0-update12
Adobe ColdFusion=11.0-update13
Adobe ColdFusion=11.0-update14
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=11.0-update8
Adobe ColdFusion=11.0-update9
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2018
Event History
Sep 25, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this Adobe ColdFusion vulnerability?
The vulnerability ID is CVE-2018-15957.
2
What is the severity of CVE-2018-15957?
The severity of CVE-2018-15957 is critical with a CVSS score of 9.8.
3
Which versions of Adobe ColdFusion are affected by CVE-2018-15957?
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier are affected by CVE-2018-15957.
4
What is the impact of exploiting CVE-2018-15957?
Successful exploitation of CVE-2018-15957 could lead to arbitrary code execution.
5
How can I fix CVE-2018-15957?
To fix CVE-2018-15957, it is recommended to update to Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 7 or later.