← Back

CVE-2018-4942

nvd nist
Published: May 19, 2018Modified: May 6, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.

Affected (20)

Products: Adobe: Coldfusion
Adobe
1 product
Coldfusion
Configuration A
20 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Coldfusion
Version 11.0
Coldfusion
Version 11.0 update10
Coldfusion
Version 11.0 update11
Coldfusion
Version 11.0 update12
Coldfusion
Version 11.0 update13
Coldfusion
Version 11.0 update1
Coldfusion
Version 11.0 update2
Coldfusion
Version 11.0 update3
Coldfusion
Version 11.0 update4
Coldfusion
Version 11.0 update5
Coldfusion
Version 11.0 update6
Coldfusion
Version 11.0 update7
Coldfusion
Version 11.0 update8
Coldfusion
Version 11.0 update9
Coldfusion
Version 2016
Coldfusion
Version 2016 update1
Coldfusion
Version 2016 update2
Coldfusion
Version 2016 update3
Coldfusion
Version 2016 update4
Coldfusion
Version 2016 update5

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (4)

Source: psirt@adobe.com
Third Party AdvisoryVDB Entry
Source: psirt@adobe.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.