VulnerabilitycriticalExploited in the wild

Adobe Issues ColdFusion Software Update for 6 Critical Vulnerabilities

The Hacker Newsby @TheHackersNewsSep 11, 2018 · 17:25 UTC (Sep 11, 2018)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-15967 CVE-2018-15965 CVE-2018-15957 CVE-2018-15958 CVE-2018-15959 CVE-2018-15961 CVE-2018-15960 CVE-2018-15963 CVE-2018-15962 CVE-2018-15964

Tags: cve-2018-15967 cve-2018-15965 cve-2018-15957 cve-2018-15958 cve-2018-15959 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-15961 +8 related CVEs CVE-2018-15957 CVE-2018-15958 CVE-2018-15959 CVE-2018-15965 CVE-2018-15964 CVE-2018-15960 CVE-2018-15963 CVE-2018-15962	Unrestricted File Upload Leading to RCE in Adobe ColdFusion	9.8 group max	100%	KEVPoC	Sep 25, 2018 KEV Nov 3, 2021
CVE-2018-15967	Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability	7.5	7%		Sep 25, 2018

From the original article

2 min read at thehackernews.com

Adobe has released September 2018 security patch updates for a total of 10 vulnerabilities in Flash Player and ColdFusion, six of which are rated as critical that affected ColdFusion and could allow attackers to remotely execute arbitrary code on a vulnerable server.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.