{"id":"CVE-2018-15964","published":"2018-09-25T13:00:00Z","modified":"2025-05-06T14:42:45Z","title":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a…","vendor":"Adobe","product":"ColdFusion","tier":"tail","description":{"text":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.07879,"percentile":0.94687,"provenance":"source"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1041621","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/105311","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":24.2,"factors":[{"name":"EPSS percentile","points":18.94},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"adobe","affectedVersions":[{"vendor":"Adobe","product":"ColdFusion","versions":["July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"]}],"euvd":{"id":"EUVD-2018-7820","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-adobe-coldfusion-cwe-200"}}