{"id":"CVE-2018-15962","published":"2018-09-25T13:00:00Z","modified":"2025-05-06T14:44:17Z","title":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a…","vendor":"Adobe","product":"ColdFusion","tier":"tail","description":{"text":"Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a directory listing vulnerability. Successful exploitation could lead to information disclosure.","provenance":"source","from":"CVE.org"},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.05549,"percentile":0.92811,"provenance":"source"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://helpx.adobe.com/security/products/coldfusion/apsb18-33.html","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/105318","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1041621","tags":["vdb-entry","x_refsource_SECTRACK"]}],"priority":{"score":22.3,"factors":[{"name":"EPSS percentile","points":18.56},{"name":"CVSS severity","points":3.71}]},"vendorSlug":"adobe","affectedVersions":[{"vendor":"Adobe","product":"ColdFusion","versions":["July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier versions"]}],"euvd":{"id":"EUVD-2018-7818","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-adobe-coldfusion-cwe-200"}}