Description (CNA)
ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code execution in the context of the current user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Adobe / Cold Fusion | affected ColdFusion 2018- update 4 and earlier; affected ColdFusion 2016- update 11 and earlier |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.