10
CVE-2018-15961
- EPSS 94.42%
- Veröffentlicht 25.09.2018 13:29:01
- Zuletzt bearbeitet 23.10.2025 11:12:58
- Quelle psirt@adobe.com
- CVE-Watchlists
- Unerledigt
LoginAdobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version11.0 Update-
Adobe ≫ Coldfusion Version11.0 Updateupdate1
Adobe ≫ Coldfusion Version11.0 Updateupdate10
Adobe ≫ Coldfusion Version11.0 Updateupdate11
Adobe ≫ Coldfusion Version11.0 Updateupdate12
Adobe ≫ Coldfusion Version11.0 Updateupdate13
Adobe ≫ Coldfusion Version11.0 Updateupdate14
Adobe ≫ Coldfusion Version11.0 Updateupdate2
Adobe ≫ Coldfusion Version11.0 Updateupdate3
Adobe ≫ Coldfusion Version11.0 Updateupdate4
Adobe ≫ Coldfusion Version11.0 Updateupdate5
Adobe ≫ Coldfusion Version11.0 Updateupdate6
Adobe ≫ Coldfusion Version11.0 Updateupdate7
Adobe ≫ Coldfusion Version11.0 Updateupdate8
Adobe ≫ Coldfusion Version11.0 Updateupdate9
Adobe ≫ Coldfusion Version2016 Update-
Adobe ≫ Coldfusion Version2016 Updateupdate1
Adobe ≫ Coldfusion Version2016 Updateupdate2
Adobe ≫ Coldfusion Version2016 Updateupdate3
Adobe ≫ Coldfusion Version2016 Updateupdate4
Adobe ≫ Coldfusion Version2016 Updateupdate5
Adobe ≫ Coldfusion Version2016 Updateupdate6
Adobe ≫ Coldfusion Version2018 Update-
03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog
Adobe ColdFusion Unrestricted File Upload Vulnerability
SchwachstelleAdobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.
BeschreibungApply updates per vendor instructions.
Erforderliche Maßnahmen| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 94.42% | 1 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.