CVE-2019-7091: Critical severity adobe coldfusion vulnerability
Published May 24, 2019
·Updated
ColdFusion versions Update 1 and earlier, Update 7 and earlier, and Update 15 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
26 affected components
Adobe ColdFusion=11.0
Adobe ColdFusion=11.0-update1
Adobe ColdFusion=11.0-update10
Adobe ColdFusion=11.0-update11
Adobe ColdFusion=11.0-update12
Adobe ColdFusion=11.0-update13
Adobe ColdFusion=11.0-update14
Adobe ColdFusion=11.0-update15
Adobe ColdFusion=11.0-update2
Adobe ColdFusion=11.0-update3
Adobe ColdFusion=11.0-update4
Adobe ColdFusion=11.0-update5
Adobe ColdFusion=11.0-update6
Adobe ColdFusion=11.0-update7
Adobe ColdFusion=11.0-update8
Adobe ColdFusion=11.0-update9
Adobe ColdFusion=2016
Adobe ColdFusion=2016-update1
Adobe ColdFusion=2016-update2
Adobe ColdFusion=2016-update3
Adobe ColdFusion=2016-update4
Adobe ColdFusion=2016-update5
Adobe ColdFusion=2016-update6
Adobe ColdFusion=2016-update7
Adobe ColdFusion=2018
Adobe ColdFusion=2018-update1
Event History
May 24, 2019
CVE Published
via MITRE·06:42 PM
Data Sourced
via MITRE·06:42 PM
DescriptionWeakness
Frequently Asked Questions
1
What is vulnerability CVE-2019-7091?
CVE-2019-7091 is a deserialization of untrusted data vulnerability in Adobe ColdFusion.
2
What is the severity of vulnerability CVE-2019-7091?
The severity of CVE-2019-7091 is critical with a CVSS score of 9.8.
3
Which versions of Adobe ColdFusion are affected by CVE-2019-7091?
Adobe ColdFusion versions 11.0 through update 15, as well as ColdFusion 2016 through update 7, and ColdFusion 2018 through update 1 are affected.
4
What is the potential impact of CVE-2019-7091?
Successful exploitation of CVE-2019-7091 can lead to arbitrary code execution.
5
Where can I find more information about CVE-2019-7091?
You can find more information about CVE-2019-7091 on the Adobe website at https://helpx.adobe.com/security/products/coldfusion/apsb19-10.html.