CVE-2018-15960

EPSS 5.53%
Veröffentlicht 25.09.2018 13:29:01
Zuletzt bearbeitet 21.11.2024 03:51:48
Erkennungen
Login

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 23 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Coldfusion Version 11.0 Update -

Adobe ≫ Coldfusion Version 11.0 Update update1

Adobe ≫ Coldfusion Version 11.0 Update update10

Adobe ≫ Coldfusion Version 11.0 Update update11

Adobe ≫ Coldfusion Version 11.0 Update update12

Adobe ≫ Coldfusion Version 11.0 Update update13

Adobe ≫ Coldfusion Version 11.0 Update update14

Adobe ≫ Coldfusion Version 11.0 Update update2

Adobe ≫ Coldfusion Version 11.0 Update update3

Adobe ≫ Coldfusion Version 11.0 Update update4

Adobe ≫ Coldfusion Version 11.0 Update update5

Adobe ≫ Coldfusion Version 11.0 Update update6

Adobe ≫ Coldfusion Version 11.0 Update update7

Adobe ≫ Coldfusion Version 11.0 Update update8

Adobe ≫ Coldfusion Version 11.0 Update update9

Adobe ≫ Coldfusion Version 2016 Update -

Adobe ≫ Coldfusion Version 2016 Update update1

Adobe ≫ Coldfusion Version 2016 Update update2

Adobe ≫ Coldfusion Version 2016 Update update3

Adobe ≫ Coldfusion Version 2016 Update update4

Adobe ≫ Coldfusion Version 2016 Update update5

Adobe ≫ Coldfusion Version 2016 Update update6

Adobe ≫ Coldfusion Version 2018 Update -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.53%	0.918

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1041621

Third Party Advisory

VDB Entry

https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html

Vendor Advisory

http://www.securityfocus.com/bid/105317

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2018-15960

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-15960

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-15960

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2018-15960