← Back to browse · API

CVE-2018-4939

Severity
CRITICAL
CVSS
9.8
EPSS
0.62913
Risk score
86.22
CISA KEV
Yes
PoC
No
Published
2021-11-03
Modified
2021-11-03
First seen
2026-08-07
Aliases
EUVD-2018-16724, GHSA-P86W-QV2X-RF6J
Products
Adobe:ColdFusion, n/a:Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions Adobe ColdFusion ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions
Sources
euvd EUVD-2018-16724
cisa.gov CVE-2018-4939

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.

References