CVE-2018-15959: Critical severity adobe coldfusion vulnerability

Published Sep 25, 2018

Updated

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected Software

23 affected components

Adobe ColdFusion=11.0

Adobe ColdFusion=11.0-update1

Adobe ColdFusion=11.0-update10

Adobe ColdFusion=11.0-update11

Adobe ColdFusion=11.0-update12

Adobe ColdFusion=11.0-update13

Adobe ColdFusion=11.0-update14

Adobe ColdFusion=11.0-update2

Adobe ColdFusion=11.0-update3

Adobe ColdFusion=11.0-update4

Adobe ColdFusion=11.0-update5

Adobe ColdFusion=11.0-update6

Adobe ColdFusion=11.0-update7

Adobe ColdFusion=11.0-update8

Adobe ColdFusion=11.0-update9

Adobe ColdFusion=2016

Adobe ColdFusion=2016-update1

Adobe ColdFusion=2016-update2

Adobe ColdFusion=2016-update3

Adobe ColdFusion=2016-update4

Adobe ColdFusion=2016-update5

Adobe ColdFusion=2016-update6

Adobe ColdFusion=2018

Event History

Sep 25, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-15959?

The severity of CVE-2018-15959 is critical, with a severity value of 9.8.

What is the affected software for CVE-2018-15959?

The affected software for CVE-2018-15959 is Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier.

What is the vulnerability description of CVE-2018-15959?

CVE-2018-15959 is a deserialization of untrusted data vulnerability in Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier.

How can CVE-2018-15959 be exploited?

Successful exploitation of CVE-2018-15959 could lead to arbitrary code execution.

Are there any references available for CVE-2018-15959?

Yes, there are references available for CVE-2018-15959. You can find them at the following links: [link1](http://www.securityfocus.com/bid/105313), [link2](http://www.securitytracker.com/id/1041621), [link3](https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html).