Advisories · Technology

Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions.

Every CVE that names Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-4942 CVE record

CVSS 7.5 High

XML external entity injection in Adobe ColdFusion ColdFusion Update 5 and earlier versions…
- Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
- XML external entities (XXE)
Not analysed yet 19 May 2018
CVE-2018-4941 CVE record

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability.
- Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
Not analysed yet 19 May 2018
CVE-2018-4940 CVE record

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability.
- Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
Not analysed yet 19 May 2018
CVE-2018-4939 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Deserialization of untrusted data in Adobe ColdFusion ColdFusion Update 5 and earlier versions…
- Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
- Insecure deserialization
Not analysed yet 19 May 2018
CVE-2018-4938 CVE record

CVSS 7.8 High

Uncontrolled search path in Adobe ColdFusion ColdFusion Update 5 and earlier versions…
- Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
- CWE-427
Not analysed yet 19 May 2018