CVE-2018-15960

CVSS 3.0: 7.5 high
EPSS: 6%p92
Published: Sep 25, 2018 · Sep 25, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-15960 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite.

Vendors: adobe

Products: coldfusion

Weakness: CWE-20

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news

1 story

Adobe Issues ColdFusion Software Update for 6 Critical Vulnerabilities

The Hacker NewsSep 11, 17:25 UTC · Sep 11, 2018VulnerabilityExploitedCVE-2018-15967 CVE-2018-15965 CVE-2018-15957+72 · 1 read