CVE-2018-15965: Critical severity adobe coldfusion vulnerability
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-15965?
CVE-2018-15965 is a vulnerability in Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier that allows for the deserialization of untrusted data, potentially leading to arbitrary code execution.
How severe is CVE-2018-15965?
CVE-2018-15965 has a severity rating of critical with a score of 9.8 out of 10.
Which versions of Adobe ColdFusion are affected by CVE-2018-15965?
Adobe ColdFusion versions 11.0 and 2016 are affected, including various update versions.
How can CVE-2018-15965 be exploited?
CVE-2018-15965 can be exploited by malicious actors who are able to send specially crafted serialized data to the affected Adobe ColdFusion server.
Are there any official references for CVE-2018-15965?
Yes, you can refer to the following links for more information: [SecurityFocus](http://www.securityfocus.com/bid/105313), [SecurityTracker](http://www.securitytracker.com/id/1041621), and [Adobe Security Bulletin APSB18-33](https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html).