description: ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Command Injection via Vulnerable component vulnerability. Successful exploitation could lead to Arbitrary code execution in the context of the current user.
problem types: Command Injection via Vulnerable component
affected:
{
product: Cold Fusion
vendor: Adobe
versions:
status: affected, version: ColdFusion 2018- update 4 and earlier
status: affected, version: ColdFusion 2016- update 11 and earlier
}