EXPOSURES › CVE-2018-4939

CVE-2018-4939

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-4939 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 85/100 rceexploited-in-wildunpatched

Adobe ColdFusion suffered a deserialization of untrusted data vulnerability allowing remote code execution.

The vulnerability allowed attackers to execute arbitrary code on systems running ColdFusion, leading to potential data breaches and system compromise. DIB organizations must ensure ColdFusion is patched to the latest version to prevent exploitation, as this flaw was actively exploited in the wild.

Shame score — A CVSS 10.0 vulnerability in a widely used product was actively exploited in the wild, indicating severe negligence in patch management and security practices.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

Adobe · vendor ColdFusion · product

DESCRIPTION

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.

SENTIMENT · TRUSTED SOURCES

synthesis severe-fallout -0.60

Adobe's CVE-2018-4939 deserialization flaw allowing code execution was widely recognized as a critical vulnerability, though the provided sources lack specific press coverage or authority commentary o

cooey ↗ severe-fallout -0.60

Critical vulnerability acknowledged but no specific praise or condemnation of Adobe's handling is present in the source text.

"Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution."

app.opencve.io ↗ severe-fallout +0.00