<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: adobe-coldfusion-coldfusion-update-5-and-earlier-versions-coldfusion-11-update-1</title><description>Every new CVE for adobe-coldfusion-coldfusion-update-5-and-earlier-versions-coldfusion-11-update-1.</description><link>https://agentprime.io/</link><item><title>CVE-2018-4942: XML external entity injection in Adobe ColdFusion ColdFusion Update 5 and earlier versions…</title><link>https://agentprime.io/advisories/CVE-2018-4942/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-4942/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 May 2018 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-4941: Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability.</title><link>https://agentprime.io/advisories/CVE-2018-4941/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-4941/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 May 2018 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-4940: Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability.</title><link>https://agentprime.io/advisories/CVE-2018-4940/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-4940/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 May 2018 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-4939: Deserialization of untrusted data in Adobe ColdFusion ColdFusion Update 5 and earlier versions…</title><link>https://agentprime.io/advisories/CVE-2018-4939/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-4939/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.62 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 May 2018 17:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2018-4938: Uncontrolled search path in Adobe ColdFusion ColdFusion Update 5 and earlier versions…</title><link>https://agentprime.io/advisories/CVE-2018-4938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-4938/</guid><description>CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 19 May 2018 17:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>