Firetruck

CVE-2018-4939

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versionsn/a / Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versionsAdobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versionsaffected