Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2018-15964: Adobe ColdFusion may leak data
CVE-2018-15964 · published 8 years ago
Summary
Versions of Adobe ColdFusion released on July 12, 2018 and any Update 6 or earlier, as well as Update 14 or earlier, contain a component that can be abused to expose information. If an attacker exploits this, they could view data that should be private. Update to the latest ColdFusion release or apply the vendor's security patch to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| adobe | coldfusion |
11.0 2016 2018 cpe:2.3:a:adobe:coldfusion:11.0:-:*:*:*:*:*:* |
Original advisory text
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitat...
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to information disclosure.
References
- http://www.securityfocus.com/bid/105311 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1041621 Third Party Advisory VDB Entry
- https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published25 Sep 2018
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2018-15964 · NVD
Track software like this
Free during beta