Known vulnerabilities in ColdFusion 11 Update 17

Vendor: Adobe
Software: ColdFusion
Version: 11 Update 17
Software CPE: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting ColdFusion version 11 Update 17 ColdFusion 11 Update 17 is affected by 3 vulnerabilities: 3 high Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18740 - Deserialization of Untrusted Data
CVE-2019-7840
CWE-502 High
No
No
11 Update 19, 2016 Update 11, 2018 Update 4 11.06.2019 SB2019061105
#VU18738 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7838
CWE-434 High
No
No
11 Update 19, 2016 Update 11, 2018 Update 4 11.06.2019 SB2019061105
#VU17889 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7816
CWE-434 High
No
Exploited
11 Update 18, 2016 Update 10, 2018 Update 3 01.03.2019 SB2019030102