← KEV catalogCISA known exploited vulnerability
CVE-2018-4939
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
SOURCE FACT
Adobe · ColdFusion
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2018-4939
View source evidence →
CHECK YOUR OUTSIDE-IN INVENTORY
Could this product be present?