Adobe ColdFusion ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier vulnerabilities
We track 1 vulnerability in Adobe ColdFusion ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on April 27, 2017.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest Adobe ColdFusion ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier vulnerabilities
- 9.8 Critical severity
Adobe ColdFusion Deserialization Exploited
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS library. Successful exploitation could lead to arbitrary code execution.