Unrated severityCISA KEVNVD Advisory· Published May 19, 2018· Updated Oct 21, 2025
CVE-2018-4939
CVE-2018-4939
Description
Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected products
1- N/A/Adobe Coldfusion Coldfusion Update 5 And Earlier Versions, Coldfusion 11 Update 13 And Earlier Versionsv5Range: Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/103718mitrevdb-entryx_refsource_BID
- helpx.adobe.com/security/products/coldfusion/apsb18-14.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.