Exposures › CVE-2018-4939

CVE-2018-4939

Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2021-11-03
Reference
⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.

Players implicated

Adobe · vendorColdFusion · product

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.

Sentiment · trusted sources

  • synthesis severe-fallout -0.60
    Adobe's CVE-2018-4939 deserialization flaw allowing code execution was widely recognized as a critical vulnerability, though the provided sources lack specific press coverage or authority commentary o
  • cooey ↗ severe-fallout -0.60
    Critical vulnerability acknowledged but no specific praise or condemnation of Adobe's handling is present in the source text.
    “Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.”
  • app.opencve.io ↗ severe-fallout +0.00
    No relevant content regarding Adobe or CVE-2018-4939.
  • SentinelOne ↗ severe-fallout +0.00
    No relevant content regarding Adobe or CVE-2018-4939.
  • www.cvefind.com ↗ severe-fallout +0.00
    No relevant content regarding Adobe or CVE-2018-4939.
  • www.vulncheck.com ↗ severe-fallout +0.00
    No relevant content regarding Adobe or CVE-2018-4939.
  • cvefeed.io ↗ severe-fallout +0.00
    No relevant content regarding Adobe or CVE-2018-4939.

Affected FedRAMP products 8 in the catalog

ProductProviderStatusMatch
Adobe Acrobat Sign for Government Adobe Authorized vendor-exact · 0.90
Adobe Analytics Adobe Authorized vendor-exact · 0.90
Adobe Campaign Adobe Authorized vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe Authorized vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe Authorized vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe Authorized vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe Authorized vendor-exact · 0.90
Adobe Learning Manager Adobe Authorized vendor-exact · 0.90