{"id":"CVE-2018-15965","published":"2018-09-25T13:00:00Z","modified":"2025-05-06T14:41:59Z","title":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a…","vendor":"Adobe","product":"ColdFusion","tier":"tail","description":{"text":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.","provenance":"source","from":"CVE.org"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.25856,"percentile":0.9797,"provenance":"source"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1041621","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/105313","tags":["vdb-entry","x_refsource_BID"]}],"priority":{"score":26.5,"factors":[{"name":"EPSS percentile","points":19.59},{"name":"CVSS severity","points":6.86}]},"vendorSlug":"adobe","affectedVersions":[{"vendor":"Adobe","product":"ColdFusion","versions":["July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"]}],"euvd":{"id":"EUVD-2018-7821","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-adobe-coldfusion-cwe-502"}}