CVE-2018-15963: Medium severity adobe coldfusion vulnerability
Published Sep 25, 2018
·Updated
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary folder creation.
Affected Software
23 affected components
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update10
Adobe ColdFusion=11.0-update11
Adobe ColdFusion=11.0-update12
Adobe ColdFusion=11.0-update13
Adobe ColdFusion=11.0-update14
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=11.0-update8
Adobe ColdFusion=11.0-update9
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2018
Event History
Sep 25, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-15963?
CVE-2018-15963 is a security bypass vulnerability in Adobe ColdFusion.
2
What versions of Adobe ColdFusion are affected by CVE-2018-15963?
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier are affected by CVE-2018-15963.
3
What is the severity of CVE-2018-15963?
CVE-2018-15963 has a severity rating of 5.3 (medium).
4
What is the potential impact of CVE-2018-15963?
Successful exploitation of CVE-2018-15963 could lead to arbitrary folder creation.
5
How can I mitigate the security bypass vulnerability in Adobe ColdFusion?
To mitigate the security bypass vulnerability, it is recommended to apply the necessary security updates provided by Adobe.