7.8

CVE-2018-4938

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version 11.0 Update -
Adobe ≫ Coldfusion Version 11.0 Update update1
Adobe ≫ Coldfusion Version 11.0 Update update10
Adobe ≫ Coldfusion Version 11.0 Update update11
Adobe ≫ Coldfusion Version 11.0 Update update12
Adobe ≫ Coldfusion Version 11.0 Update update13
Adobe ≫ Coldfusion Version 11.0 Update update2
Adobe ≫ Coldfusion Version 11.0 Update update3
Adobe ≫ Coldfusion Version 11.0 Update update4
Adobe ≫ Coldfusion Version 11.0 Update update5
Adobe ≫ Coldfusion Version 11.0 Update update6
Adobe ≫ Coldfusion Version 11.0 Update update7
Adobe ≫ Coldfusion Version 11.0 Update update8
Adobe ≫ Coldfusion Version 11.0 Update update9
Adobe ≫ Coldfusion Version 2016 Update -
Adobe ≫ Coldfusion Version 2016 Update update1
Adobe ≫ Coldfusion Version 2016 Update update2
Adobe ≫ Coldfusion Version 2016 Update update3
Adobe ≫ Coldfusion Version 2016 Update update4
Adobe ≫ Coldfusion Version 2016 Update update5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.73% 0.493
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

http://www.securityfocus.com/bid/103718
Third Party Advisory
VDB Entry
https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html
Vendor Advisory