CVE-2018-4942

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@adobe.com

Published

2018-05-19

Last modified

2025-05-06

Weaknesses

CWE-611

Affected products

• Coldfusion (Adobe)

References

• http://www.securityfocus.com/bid/103718
• https://helpx.adobe.com/security/products/coldfusion/apsb18-14.html